<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="756">
<package pkgid="e1aed4e36cbf78ca9d3b1b954155b1236b218496982f6e9e4a0cc9d503be4fdb" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="10.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
</package>
<package pkgid="958920380b9047491f940499eb7506d78e351136114d0808c499db71261a4942" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="12.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
</package>
<package pkgid="d0836da985c979418f37b81c391dc7329a2837266fbd8dd096786333979f4aac" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="13.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
</package>
<package pkgid="fafc1c45fe8d564a17792019f7a48158f3d81e13ac7b2852d3b9e8ca54c7b35d" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="14.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
</package>
<package pkgid="642801e55c25c55c6b81d8aa54c37c832d7078b91569432f01ef9fa82c0f3d87" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="15.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
</package>
<package pkgid="c9f6a26c028e0eb4e6a20ccecf545f8abd0245f3385edad16e34bb705e643f30" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="16.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
</package>
<package pkgid="2ffec20880de9411634c2fc51f0a7882dc13ab6ffee1316fec54007a54b265f5" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="17.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
</package>
<package pkgid="f489b84323e518b86631c9fb8f323772c500d533bb255530165ebe5e9b87bc4a" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="7.1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-5" date="1581076800">- Bump version to 1.3.10.1-5
- Resolves: Bug 1744623 - DB Deadlock on modrdn appears to corrupt database and entry cache(cont)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
</package>
<package pkgid="6a3f9006c601c9d5f96a80487b9ce2b7016f52eee1fd727745ead8bd5436686e" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="8.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-6" date="1583150400">- Bump version to 1.3.10.1-6
- Resolves: Bug 1801694 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1803052 - Memory leak in ACI using IP subject
- Resolves: Bug 1801703 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1809160 - Entry cache contention during base search</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150401">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
</package>
<package pkgid="03ee53a642a2f4ff023a058686d7a3c4d4cb047d8985d7cb09f81859e6cd8002" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.10.2" rel="9.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.1-7" date="1583150400">- Bump version to 1.3.10.1-7
- Resolves: Bug 1803023 - Several memory leaks reported by Valgrind (fix regression)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-1" date="1584360000">- Bump version to  1.3.10.2-1
- Resolves: Bug 1724761 - Entry cache contention during base search
- Resolves: Bug 1515319 - nsDS5ReplicaId cant be set to the old value it had before
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions
- Resolves: Bug 1762901 - cenotaph errors on modrdn operations
- Resolves: Bug 1772616 - Typo in the replication debug message "error 0 for oparation 561" 
- Resolves: Bug 1781276 - Regression: NSS has interop problems as server when using limited cipher list
- Resolves: Bug 1787921 - Crash on startup: Bus error in __env_faultmem.isra.1.part.2
- Resolves: Bug 1759142 - No error returned when adding an entry matching filters for a non existing automember group
- Resolves: Bug 1763365 - ns-slapd is crashing while restarting ipactl
- Resolves: Bug 1769418 - Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
- Resolves: Bug 1775165 - ldclt core dumped when run with -e genldif option
- Resolves: Bug 1796558 - Memory leak in ACI using IP subject
- Resolves: Bug 1769296 - cl-dump exit code is 0 even if command fails with invalid arguments</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-2" date="1587643200">- Bump version to  1.3.10.2-2
- Resolves: Bug 1820433 - Invalid defaults.inf, missing key db_home_dir
- Resolves: Bug 1801327 - intermittent SSL hang with rhds
- Resolves: Bug 1807537 - wildcards in rootdn-allow-ip attribute are not accepted
- Resolves: Bug 1827284 - Memory leak in indirect COS</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-3" date="1589889600">- Bump version to 1.3.10.2-3
- Resolves: Bug 1824930 - ipa ns-slapd 3 threads deadlock, db pages, state_change lock, write vattr lock
- Resolves: Bug 1837477 - ns-slapd hangs during CleanAllRUV tests</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-4" date="1590753600">- Bump version to 1.3.10.2-4
- Resolves: Bug 1837105 - Check for clock errors and time skew</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-5" date="1591099200">- Bump version to 1.3.10.2-5
- Resolves: Bug 1700987 - 389-base-ds expected file permissions in package don't match final runtime permissions</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-6" date="1591272000">- Bump version to 1.3.10.2-6
- Resolves: Bug 1839085 - IPA: Winsync not honoring parameters winSyncDirectoryFilter and winSyncWindowsFilter</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-7" date="1603281600">- Bump version to 1.3.10.2-7
- Resolves: Bug 1870624 - RHDS - allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
- Resolves: Bug 1876028 - errors log with incorrectly formatted message parent_update_on_childchange on PARENTUPDATE_DEL
- Resolves: Bug 1860008 - On ADD replication URP issue internal searches with filter containing unescaped chars</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-8" date="1606996800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1904145 - group rdn with leading space char and add fails error 21 invalid syntax and delete fails error 32
- Resolves: Bug 1902042 - Entries conflict not resolved by replication</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-8
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
</package>
<package pkgid="185f7418f551289519271e08c294f29ba7032c69524d14aaf9f54f4509068327" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.11.1" rel="1.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-9" date="1610020800">- Bump version to 1.3.10.2-9
- Resolves: Bug 1905450 - Internal unindexed search crashes the server</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 1.3.11.1-1" date="1676980800">- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use</changelog>
</package>
<package pkgid="38d8dbdda4f4aedffadc2ac71033b01d9a38480e327673191021e43e8627424b" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.11.1" rel="2.el7_9"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10.2-10" date="1614254400">- Bump version to 1.3.10.2-10
- Resolves: Bug 1909342 - DS crash in deref plugin while dereferencing an entry that exists but that is not returned by internal search
- Resolves: Bug 1921856 - “write” permission of ACI changes ns-slapd’s behavior on search operation 
- Resolves: Bug 1881968 - Replication Lag under high load</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 1.3.11.1-1" date="1676980800">- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.11.1-2" date="1684843200">- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version string</changelog>
</package>
<package pkgid="61ddfe175f1e2ea4b4fed8d4af157311cffc6e496f02e677058cea4893b1fb2e" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.11.1" rel="3.el7_9"/>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-11" date="1620216000">- Bump version to 1.3.10.2-11
- Resolves: Bug 1953673 - Add new access log keywords for time spent in work queue and actual operation time
- Resolves: Bug 1931182 - information disclosure during the binding of a DN</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 1.3.11.1-1" date="1676980800">- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.11.1-2" date="1684843200">- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version string</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.11.1-3" date="1692014400">- Bump version to 1.3.11.1-3
- Resolves: rhbz#2224507 - Paged search impacts performance</changelog>
</package>
<package pkgid="f2a35b4feb9f0e4881d2c862ea86389d0d25053ecac8eab2d409c83232cbb586" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.11.1" rel="4.el7_9"/>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-12" date="1620388800">- Bump version to 1.3.10.2-12</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 1.3.11.1-1" date="1676980800">- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.11.1-2" date="1684843200">- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version string</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.11.1-3" date="1692014400">- Bump version to 1.3.11.1-3
- Resolves: rhbz#2224507 - Paged search impacts performance</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.11.1-4" date="1702468800">- Bump version to 1.3.11.1-4
- Resolves: RHEL-17332 - ns-slapd crash in slapi_attr_basetype</changelog>
</package>
<package pkgid="0ed498cd9754b04053fd225e689036f33cedc22003e7fb6efb2463aa75a90da1" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.11.1" rel="5.el7_9"/>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-13" date="1632139200">- Bump version to 1.3.10.2-13
- Resolves: Bug 2005399 - Internal unindexed searches in syncrepl
- Resolves: Bug 2005432 - CVE-2021-3652 389-ds:1.4/389-ds-base: CRYPT password hash with asterisk allows any bind attempt to succeed
- Resolves: Bug 2005434 - ACIs are being evaluated against the Replication Manager account in a replication context.
- Resolves: Bug 2005435 - A connection can be erroneously flagged as replication conn during evaluation of an aci with ip bind rule</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-14" date="1635508800">- Bump version to 1.3.10.2-14
- Resolves: Bug 2018257 - hang because of incorrect accounting of readers in vattr rwlock
- Resolves: Bug 2010976 - IPA server (389ds) is very slow in execution of some searches (`&amp;(memberOf=...)(objectClass=ipaHost)` in particular)</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-15" date="1643889600">- Bump version to 1.3.10.2-15
- Resolves: Bug 2049812 - Fix csn generator to limit time skew drift
- Resolves: Bug 2048530 - CVE-2021-4091 389-ds-base: double-free of the virtual attribute context in persistent search</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.10.2-16" date="1654603200">- Bump version to 1.3.10.2-16
- Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS
- Resolves: Bug 2014768 - Log the Auto Member invalid regex rules in the LDAP errors log
- Resolves: Bug 2018153 - RFE - Provide an option to abort an Auto Member rebuild task
- Resolves: Bug 2093294 - CVE-2022-0996 389-ds:1.4/389-ds-base: expired password was still allowed to access the database</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.10-2-17" date="1664539200">- Bump version to 1.3.10.2-17
- Resolves: Bug 2113056 - Import may break replication because changelog starting csn may not be created
- Resolves: Bug 2131083 - SIGSEGV in sync_repl</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 1.3.11.1-1" date="1676980800">- Bump version to 1.3.11.1-1
- Resolves: Bug 2170224 - Backport Rust password storage PBKDF2 schemes
- Resolves: Bug 2170221 - Boolean attributes should be case insensitive
- Resolves: Bug 2170218 - Slow memberof fixup task for large static groups, high CPU use</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.11.1-2" date="1684843200">- Bump version to 1.3.11.1-2
- Resolves: Bug 2170224 - Fix upgrade scripts and version string</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.11.1-3" date="1692014400">- Bump version to 1.3.11.1-3
- Resolves: rhbz#2224507 - Paged search impacts performance</changelog>
  <changelog author="Thierry Bordaz &lt;tbordaz@redhat.com&gt; - 1.3.11.1-4" date="1702468800">- Bump version to 1.3.11.1-4
- Resolves: RHEL-17332 - ns-slapd crash in slapi_attr_basetype</changelog>
  <changelog author="James Chapman &lt;jachapma@redhat.com&gt; - 1.3.11.1-5" date="1713960000">- Bump version to 1.3.11.1-5
- Resolves: RHEL-33337 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ request
- Resolves: RHEL-34817 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c</changelog>
</package>
<package pkgid="17d2b3874966f2f62b1b0bf6297872c232b57d9825f17df0890b0b902cc904ac" name="GeoIP" arch="src">
  <version epoch="0" ver="1.5.0" rel="14.el7"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.5.0-5" date="1370692800">- Make GeoIP.dat -&gt; GeoIP-initial.dat symlink in %install, not %post,
  and don't %ghost it
- Run geoipupdate silently in %post and cron job
- Create empty database files for %ghost to work with old rpm versions
- Don't try to use noarch subpackages on old rpm versions
- Update %description to mention database updates
- Drop outdated README.Fedora</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.5.0-6" date="1370865600">- Update sub-package requires main package for geoipupdate script</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1.5.0-7" date="1384344000">- Don't download the database in %post (#1029807)
- Don't download GeoLiteASNum as it's no longer provided.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.0-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.0-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1.5.0-10" date="1467201600">- Added base IPv6 database to GeoIP package
- Added GeoIP-data subpackage with all other databases (#1201857)</changelog>
  <changelog author="Jan Safranek &lt;jsafrane@redhat.com&gt; - 1.5.0-11" date="1467201601">- Fixed rpmlint errors</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 1.5.0-12" date="1529409600">- Removed clean section
- Resolves: #1589860 - Update GeoIP legacy databases
- Resolves: #1409060 -  Missing symlink at the GeoIP-update package</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 1.5.0-13" date="1533038400">- Related: #1409060 -  Missing symlink at the GeoIP-update package</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 1.5.0-14" date="1550491200">- Resolves: #1666767 - Remove geoipupdate binary from GeoIP</changelog>
</package>
<package pkgid="2515beefed30a1dd2af9415486ab6b44308ed3c8ae2d757f2e29a81796c80e61" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.9.10.68" rel="4.el7"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-11" date="1454414400">- Fixed crash when processing .exr files (rhbz#1303227)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
</package>
<package pkgid="47f554a4ea04df980a39da52a684847d863bccef7cb9a9cc94ff2c0aa8dd42f3" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.9.10.68" rel="5.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-13" date="1462449600">- Add fix for CVE-2016-3714, CVE-2016-3715, CVE-2016-3716, CVE-2016-3717</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
</package>
<package pkgid="c9869351ef7e0437bbbc12f6d8448f7338261c96859c802fc93983ea6caa9ab6" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.9.10.68" rel="6.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-15" date="1464868800">- Added fix for CVE-2016-5118, CVE-2016-5240, rhbz#1269562,
  rhbz#1326834, rhbz#1334188, rhbz#1269553</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
</package>
<package pkgid="f0dd904d4c72ae14d9beabc7c2e22e4eda28fe12aaefbe1373e5992fb5654742" name="ImageMagick" arch="src">
  <version epoch="0" ver="6.9.10.68" rel="7.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-16" date="1540382400">- Added fix for long convert under some circumstances (rhbz#1633602)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-17" date="1546948800">- Enable lcms2 support (rhbz#1585291)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.7.8.9-18" date="1554984000">- Fixed white images</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-1" date="1571832000">- Rebase to 6.9.10.68</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-2" date="1573128000">- Fixed ghostscript fonts, fixed multilib conflicts</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-3" date="1573473600">- Fixing freeze when svg file contains class=''</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-4" date="1594382400">- Build with openjpeg2 to support JPEG2000 again</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-5" date="1608292800">- Adding CTV-2020-29599 fix</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-6" date="1632312000">- Added fix for rhbz#2005800</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 6.9.10.68-7" date="1695038400">- Added fix for CVE-2021-40211</changelog>
</package>
<package pkgid="c29f59d7811446330257f90207154722e9373cba25d72c8cbf8e3c72167ae43c" name="LibRaw" arch="src">
  <version epoch="0" ver="0.19.4" rel="2.el7_9"/>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-1" date="1369828800">- Latest upstream, fixes gcc 4.8 issues.</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 0.14.8-2" date="1369828801">- Patch for double free, CVE-2013-2126, BZ 968387.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.14.8-4.20120830git98d925" date="1389182400">- Fix CVE-2013-1438 and CVE-2013-1439
- Resolves: #1002718</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.14.8-5.20120830git98d925" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-1" date="1545048000">- Update to 0.19.1
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.1-2" date="1546430400">- Remove the samples subpackage from RHEL 7
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.2-1" date="1546430401">- Update to 0.19.2
- Resolves: #1543597</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-1" date="1565784000">- Update to 0.19.4
- Resolves: #1741274</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.19.4-2" date="1698062400">- Fix CVE-2021-32142
- Resolves: RHEL-9524</changelog>
</package>
<package pkgid="0286cc25622b5b7a82c7b7251d9215cf76400a705af9496740f5bad13872b8ac" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.18.8" rel="2.el7_9"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.0-6" date="1564660800">- core: fix activation of ovs slaves after a service restart (rh #1733709)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.4-1" date="1570622400">- Update to 1.18.4 release
- cli: fix bash completion for slave-types (rh #1654062)
- core: improve handling of policy routing rules when restarting daemon (rh #1696881)
- ifcfg-rh: preserve existance of ethernet setting in profile (rh #1703960)
- tui: only add bond options to profile that are supported by tui (rh #1715720)
- cli: fix resetting default value for properties (rh #1715887)
- core: fix detecting parent device by connection's UUID (rh #1716438)
- core: fix setting IPv6 route options and destination (rh #1727193)
- core: support more "arp_validate" bond options (rh #1730793)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-2" date="1573128000">- dhcp: include conditionals from existing dhclient configuration (rh #1758550)
- core: fix sending ARP announcements (rh #1767681)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.4-3" date="1578916800">- ovs: allow changing mac address of bridges and interfaces (rh #1740557)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-1" date="1587729600">- Update to 1.18.6 release
- cli: unset "ipv[46].never-default" when setting "ipv[46].gateway" (rh #1785039)
- core: keep MTU of MACsec and MAC-VLAN interfaces in sync with parent (rh #1723690)
- core: forbid autoactivation of parent when it is blocked by user request (rh #1765566)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.6-2" date="1588593600">- vpn: gracefully handle invalid routes from VPN plugins
- workaround g_strtoll() failing with EAGAIN (rh #1797915)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-3" date="1589284800">- Update translations (rh #1796852)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.18.6-4" date="1589544000">- ip-tunnel: set cloned-mac-address only for layer2 tunnel devices (rh #1832170)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-1" date="1590753600">- Update to 1.18.8 relase
- ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841397, CVE-2020-10754)
- ifcfg-rh: handle 802-1x.pin properties.</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.18.8-2" date="1601467200">- Backport OVS related fixes (rh #1871935)
- ovs: support changing the MTU of ovs interfaces (rh #1820052)
- ovs: fix race condition in setting MAC address (rh #1852106)</changelog>
</package>
<package pkgid="1f998feaa4dcafef4c51c5afb2c19ffd13ce12100b72b3629df3e2bf582fba0a" name="WALinuxAgent" arch="src">
  <version epoch="0" ver="2.3.0.2" rel="4.el7_9"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.2.26-2.el7" date="1535544000">- Fixing unit file location</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.2.32-1.el7" date="1544529600">- Rebase to 2.2.32 [bz#1639496]
- Resolves: bz#1639496
  (walinuxagent 2.2.32 packaging request)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.2.38-1.el7" date="1561723200">- Rebase to 2.2.38 [bz#1721727]
- Resolves: bz#1721727
  ([Azure]walinuxagent 2.2.38 packaging request)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.2.38-2.el7" date="1582113600">- wla-Add-support-for-Gen2-VM-resource-disks-1654.patch [bz#1714167]
- Resolves: bz#1714167
  ([Azure][WALA] Cannot find temporary disk device in Gen2 VM)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.2.46-1" date="1584360000">- Rebase to 2.2.26 [bz#1794682]
- Resolves: bz#1794682
  ([Azure][RHEL-7]Rebase WALinuxAgent to 2.2.46)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.2.46-2" date="1591185600">- wla-Update-Provisioning-options-1853.patch [bz#1822883]
- Resolves: bz#1822883
  ([Azure][RHEL-7]Some parameter changes are not in waagent.conf)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.3.0.2-1" date="1653998400">- Rebase to 2.3.0.2 [bz#2082801]
- Resolves: bz#2082801
  ([Azure][RHEL-7]The package WALinuxAgent needs least supported version by July 2022)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.3.0.2-2" date="1654862400">- Fixing boot hang [bz#2092753]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.3.0.2-3" date="1656504000">- wla-redhat-Fix-command-sequence-for-restarting-net-inter.patch [bz#2098083]
- Resolves: bz#2098083
  ([Azure][WALA] walinuxagent kills network during boot [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.3.0.2-4" date="1657540800">- wla-redhat-Implement-restart_if-correctly-to-eliminate-w.patch [bz#2098083]
- Resolves: bz#2098083
  ([Azure][WALA] walinuxagent kills network during boot [rhel-7.9.z])</changelog>
</package>
<package pkgid="0659c4b90d051192a0c016284bd915dd7d3458637e680f02e7ffc1225e38eee4" name="adcli" arch="src">
  <version epoch="0" ver="0.8.1" rel="16.el7_9.1"/>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-8" date="1553256000">- Various updates for RHEL-7.7
- many adcli-krb5-????? directories are created /tmp [#1588596]
- adcli exports kerberos ticket with old kvno [#1642546]
- [RFE] Have `adcli join` work without FQDN in `hostname` output [#1595911]
- Improve handling of service principals [#1644311]
- [RFE] adcli command with --unix-* options doesn't update
  values in UnixAttributes Tab for user [#1337489]
- [RFE] adcli join should preserve SPN added by adcli preset-computer [#1630187]
- [RFE] Need an option for adcli command which will show domain join status. [#1622583]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-9" date="1556798400">- Fixes for RHEL-7.7 updates
- additional patch for [RFE] adcli join should preserve SPN added by adcli
  preset-computer [#1630187]
- new patches for many adcli-krb5-????? directories are created /tmp [#1588596]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-10" date="1565611200">- adcli is failing with "Couldn't add keytab entries: FILE:/etc/krb5.keytab:
  Cannot allocate memory" [1665162]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-11" date="1566907200">- Fixes and improvements for RHEL-7.8
- Issue is that with arcfour-hmac as first encryption type in the config ... [#1683745]
- adcli update --add-samba-data does not work as expected [#1738573]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-12" date="1567598400">- adcli info should send netlogin pings to all domain controllers, not only a subset [#1685138]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-13" date="1579003200">- adcli should be able to Force LDAPS over 636 with AD Access Provider w.r.t sssd [#1786776]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-14" date="1587297600">- Fixes for RHEL-7.9
- Update' adcli update --add-samba-data ' info under correct section in man adcli [#1774622]
- [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1802258]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-15" date="1591617600">- More fixes for RHEL-7.9
- No longer able to delete computer from AD using adcli [#1840752]
- adcli: presetting $computer in $domain domain failed: Cannot set computer
  password: Authentication error [#1762633]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-16" date="1606132800">- adcli: couldn't connect to KEYRING:persistent:0:krb_ccache_jgrrBI8 [#1871436]</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.8.1-16.1" date="1606132801">- add missing patch for [#1871436]</changelog>
</package>
<package pkgid="d40e565f3e93df2a188f9fbf6918f0536a8e9097903a412bacc2c4e5c72ec59e" name="aide" arch="src">
  <version epoch="0" ver="0.15.1" rel="13.el7_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.15.1-5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-6" date="1383912000">- warn if processing prelinked binary objects and the prelink binary
  is not available
  Resolves: rbhz#1004826</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.15.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.15.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-9" date="1407153600">- Don't require prelink on aarch64 and ppc64le
  Resolves: rhbz#1078555
  Resolves: rhbz#1125462</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-10" date="1466769600">- Updated the default configuration file. New defaults contributed
  by Steve Grubb.
  Resolves: rhbz#1304334</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 0.15.1-11" date="1468929600">- Corrected typos in the default configuration file
  Resolves: rhbz#1304334</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1-12" date="1488888000">- RHEL 7.4 ERRATUM
  Resolves: rhbz#1377215</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1-13" date="1490011200">- RHEL 7.4 ERRATUM
  Resolves: rhbz#1400548</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 0.15.1.1" date="1643112000">- backported fix for CVE-2021-45417
  resolves: rhbz#2041952</changelog>
</package>
<package pkgid="65a50efe10d250039a469bfc7f670373e357babb883d49b59852d4b3ec17d35a" name="apr-util" arch="src">
  <version epoch="0" ver="1.5.2" rel="6.el7_9.1"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.1-6" date="1350561600">- use -lldap_r instead of -lldap</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.1-7" date="1352289600">- ensure we use latest libdb5 (not libdb4)</changelog>
  <changelog author="Jon Ciesla &lt;limburgher@gmail.com&gt; - 1.4.1-8" date="1360238400">- Apply private patch from Merge Review BZ 225254.</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-1" date="1365508800">- update to 1.5.2</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.5.2-2" date="1365508801">- update for aarch64</changelog>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.5.2-3" date="1368100800">- do not build with freetds when it is not available</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.5.2-5" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5.2-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.5.2-6.1" date="1683633600">- Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes
  in the apr_base64</changelog>
</package>
<package pkgid="a41102dac6ebb30799ed2d9b1595f33bcc080fc6126ddb6b2e789abf662286e4" name="at" arch="src">
  <version epoch="0" ver="3.1.13" rel="25.el7_9"/>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-15" date="1389009600">- remove old changelogs
- ppc fail to rebuild package
- Resolves: rhbz#1048745</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; - 3.1.13-16" date="1389268800">- the correct solution is remove smp_flags, they don't work properly on ppc with
  the option mpower7
- Related: rhbz#1048745</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.13-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-18" date="1412337600">- filter environment variables not acceptable in bash input</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-20" date="1434974400">- build the package with hardening flags (PIE, full RELRO)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-21" date="1461153600">- correct the DST correction when using UTC time specification (#1328832)
- clear non-job files from at dir and test for write error on fclose
  to fix bogus syslog messages</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-22" date="1464004800">- SIGPIPE should not be ignored in atd (#1338039)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-23" date="1505390400">- fix the ownership of the spool directory (#1414228)
- document the -n option of atd (#739870)
- fix handling of the aborted jobs (due to possibly
  temporary conditions) and avoid flooding the syslog</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 3.1.13-24" date="1527076800">- log the jobs being run</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 3.1.13-25" date="1644926400">- re-import selinux support from upstream</changelog>
</package>
<package pkgid="09ad573b7a5faf563fefd5c8daa06e97ddad68c8e4f1da65e2759fb0f271ad1f" name="autofs" arch="src">
  <version epoch="1" ver="5.0.7" rel="116.el7_9.1"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-108" date="1565352000">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - remove unused function has_fstab_option().
  - remove unused function reverse_mnt_list().
  - remove a couple of old debug messages.
  - fix amd entry memory leak.
  - fix unlink_mount_tree() not umounting mounts.
  - add ignore mount option.
  - use ignore option for offset mounts as well.
  - add config option for "ignore" mount option
  - use bit flags for autofs mount types in mnt_list.
  - use mp instead of path in mnt_list entries.
  - always use PROC_MOUNTS to make mount lists.
  - add glibc getmntent_r().
  - use local getmntent_r in table_is_mounted().
  - refactor unlink_active_mounts() in direct.c.
  - don't use tree_is_mounted() for mounted checks.
  - use single unlink_umount_tree() for both direct and indirect mounts.
  - move unlink_mount_tree() to lib/mounts.c.
  - use local_getmntent_r() for unlink_mount_tree().
  - use local getmntent_r() in get_mnt_list().
  - use local getmntent_r() in tree_make_mnt_list().
- Resolves: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-109" date="1566302400">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - fix missing initialization of autofs_point flags.
- Related: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-110" date="1585137600">- bz1806514 - strictexpire option not set for offset mounts
  - also use strictexpire for offsets.
- Resolves: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-111" date="1585137601">- bz1806514 - strictexpire option not set for offset mounts
  - fix patch not applied.
- Related: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-112" date="1585569600">- bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
  - fix trailing dollar sun entry expansion.
- Resolves: rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-113" date="1585569601">- Fix changelog revision for previous 2 commits.
- Related: rhbz#1806514 rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-114" date="1593172800">- bz1847762 - automount program crashes with "malloc(): invalid next size
  (unsorted)
  - initialize struct addrinfo for getaddrinfo() calls.
  - fix quoted string length calc in expandsunent().
  - fix autofs mount options construction.
-Resolves: rhbz#1847762</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-115" date="1604059200">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix direct mount unlink_mount_tree() path.
  - fix unlink mounts umount order.
- bz1858586 - autofs share doesn't mount when using nobind over RDMA where
  nfs-server and nfs-client are the same systems
  - mount_nfs.c fix local rdma share not mounting.
- Resolves: rhbz#1885511 rhbz#1858586</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116" date="1604059201">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix incorrect logical compare in unlink_mount_tree().
- Related: rhbz#1885511</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116el7_9.1" date="1675857600">- bz2107752 - autofs: send FAIL cmd/ioctl mess when encountering problems
  with mount trigger
  - fix kernel mount status notification.
- Resolves: rhbz#2107752</changelog>
</package>
<package pkgid="15f909091baecb0a468440f1d3b5e4b13c576180746b28ae5914a63cacd561e0" name="autofs" arch="src">
  <version epoch="1" ver="5.0.7" rel="116.el7_9"/>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-107" date="1564488000">- bz1734057 - automount segfaults if a bad hosts entry is added
  in /etc/auto.master
  - fix reset flex scan buffer on init.
- Resolves: rhbz#1734057</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-108" date="1565352000">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - remove unused function has_fstab_option().
  - remove unused function reverse_mnt_list().
  - remove a couple of old debug messages.
  - fix amd entry memory leak.
  - fix unlink_mount_tree() not umounting mounts.
  - add ignore mount option.
  - use ignore option for offset mounts as well.
  - add config option for "ignore" mount option
  - use bit flags for autofs mount types in mnt_list.
  - use mp instead of path in mnt_list entries.
  - always use PROC_MOUNTS to make mount lists.
  - add glibc getmntent_r().
  - use local getmntent_r in table_is_mounted().
  - refactor unlink_active_mounts() in direct.c.
  - don't use tree_is_mounted() for mounted checks.
  - use single unlink_umount_tree() for both direct and indirect mounts.
  - move unlink_mount_tree() to lib/mounts.c.
  - use local_getmntent_r() for unlink_mount_tree().
  - use local getmntent_r() in get_mnt_list().
  - use local getmntent_r() in tree_make_mnt_list().
- Resolves: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-109" date="1566302400">- bz1728914 - getmntent returns additional "-hosts" entries when
  automounter is used with "hosts" map
  - fix missing initialization of autofs_point flags.
- Related: rhbz#1728914</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-110" date="1585137600">- bz1806514 - strictexpire option not set for offset mounts
  - also use strictexpire for offsets.
- Resolves: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-111" date="1585137601">- bz1806514 - strictexpire option not set for offset mounts
  - fix patch not applied.
- Related: rhbz#1806514</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-112" date="1585569600">- bz1818664 - autofs cannot mount samba/cifs shares that end with a dollar sign
  - fix trailing dollar sun entry expansion.
- Resolves: rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-113" date="1585569601">- Fix changelog revision for previous 2 commits.
- Related: rhbz#1806514 rhbz#1818664</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-114" date="1593172800">- bz1847762 - automount program crashes with "malloc(): invalid next size
  (unsorted)
  - initialize struct addrinfo for getaddrinfo() calls.
  - fix quoted string length calc in expandsunent().
  - fix autofs mount options construction.
-Resolves: rhbz#1847762</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-115" date="1604059200">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix direct mount unlink_mount_tree() path.
  - fix unlink mounts umount order.
- bz1858586 - autofs share doesn't mount when using nobind over RDMA where
  nfs-server and nfs-client are the same systems
  - mount_nfs.c fix local rdma share not mounting.
- Resolves: rhbz#1885511 rhbz#1858586</changelog>
  <changelog author="Ian Kent &lt;ikent@redhat.com&gt; - 5.0.7-116" date="1604059201">- bz1885511 - automount force unlink option (-F) does not work as expected
  on autofs-5.0.7-109.el7
  - fix incorrect logical compare in unlink_mount_tree().
- Related: rhbz#1885511</changelog>
</package>
<package pkgid="a88f8ce57ba4bd5e5620e3207be145d30eb52ef074eb77227d5fba8640196656" name="awscli" arch="src">
  <version epoch="0" ver="1.23.2" rel="1.el7_9.1"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.63-1" date="1489579200">- Update to 1.11.63</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.90-1" date="1495540800">- Update to 1.11.90</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-1" date="1498046400">- Update to 1.11.109</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-2" date="1498046401">- Forgot to update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.109-3" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.133-1" date="1502625600">- Update to 1.11.133</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-1" date="1516363200">- Update to 1.14.28
- Replace python-rsa with python-cryptography

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-4" date="1518004800">- Bundle python-colorama

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-5" date="1518436800">- Append python-botocore and python-jmespath bundled directory to
  search path where needed

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.23.2-1.1" date="1651579200">- Rebase to 1.23.2 to fix issues with upgraded libs

  Resolves: rhbz#2073979</changelog>
</package>
<package pkgid="ffc9f924a2a5ee536d7a1e1fe94bc94fc9aa2b06ad6d6b40632cad36d2b2b2cd" name="bash" arch="src">
  <version epoch="0" ver="4.2.46" rel="35.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-26" date="1486641600">- CVE-2016-0634: Fix for arbitrary code execution via malicious hostname
  Resolves: #1379237</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-27" date="1487937600">- CVE-2016-7543: Fix for arbitrary code execution via SHELLOPTS+PS4 variables
  Resolves: #1426026</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com - 4.2.46-28" date="1488888000">- CVE-2016-9401 - Fix crash when '-' is passed as second sign to popd
  Resolves: #1429838</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-29" date="1501761600">- Fix a pipe fd leak in process substitution
  Resolves: #1473245</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-30" date="1506340800">- Check for multibyte characters in commands
  Resolves: #1487615</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-31" date="1526990400">- Append '/' while tab completing directory names
  Resolves: #1495398</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-32" date="1551873600">- Add configuration option for logging bash history to syslog
  Resolves: #1160482</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-33" date="1551960000">- Add support for bracketed paste mode
  Resolves: #1573901</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-34" date="1565956800">- BASH_CMD should not be writable in restricted shell
  Resolves: #1693181</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 4.2.46-35" date="1634644800">- Bump version number
  Resolves: #2015565</changelog>
</package>
<package pkgid="62fad490b333d037bb28dce16014f5e59c2fc62d5a3d184a58a7a654cb18f124" name="bcel" arch="src">
  <version epoch="0" ver="5.2" rel="19.el7_9"/>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:5.2-10" date="1326283200">- Specify explicit source encoding to fix build with Java 7.
- Install jar and javadocs unversioned.
- Crosslink with JDK javadocs.</changelog>
  <changelog author="Gerard Ryan &lt;galileo@fedoraproject.org&gt; - 0:5.2-11" date="1340539200">- Inject OSGI Manifest.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:5.2-12" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Andy Grimm &lt;agrimm@gmail.com&gt; - 0:5.2-13" date="1345550400">- This package should not own _mavendepmapfragdir (RHBZ#850005)
- Build with maven, and clean up deprecated spec constructs
- Fix pom file (See http://jira.codehaus.org/browse/MEV-592)</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 0:5.2-14" date="1352808000">- Package NOTICE.txt</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:5.2-15" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:5.2-16" date="1371211200">- Complete spec file rewrite
- Build with Maven instead of Ant
- Remove manual subpackage</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:5.2-17" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 05.2-18" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:5.2-19" date="1669896000">- Fix arbitrary bytecode produced via out-of-bounds writing
- Resolves: CVE-2022-42920</changelog>
</package>
<package pkgid="d736c517e8d4434ae5145fad4ad2a1faab60b2d62add66f83027e68a3658ad94" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.10"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
</package>
<package pkgid="ef87f6f29b2da429435eca11c83e707d683e53f3174e8607e72d0eb9de15f469" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.13"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
</package>
<package pkgid="b248ef16a407237fde7bb3c4c791def53d3feac6e3bee715681d1fe6157d1aab" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.14"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 2:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
</package>
<package pkgid="08bb1f18e478cb28e4dc893066efdbab80687a1a3f9fd242e30b96e04d7afd57" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.15"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
</package>
<package pkgid="28832bd27dc746a07828e9bf3f3e0f369fd9f7f6c0c02ea5ad929452a70c38bb" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.16"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.10" date="1663848000">- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.11" date="1664452800">- Prevent excessive resource use while processing large delegations.
  (CVE-2022-2795)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.12" date="1671019200">- Include test of forwarders (CVE-2021-25220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.13" date="1671019201">- Tighten cache protection against record from forwarders (CVE-2021-25220)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.14" date="1688385600">- Prevent the cache going over the configured limit (CVE-2023-2828)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.15" date="1695643200">- Limit the amount of recursion possible in control channel (CVE-2023-3341)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 32:9.11.4-26.P2.16" date="1713268800">- Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
  CVE-2023-50868)
- Add missing design by contract tests to dns_catz*
- Speed up parsing of DNS messages with many different names (CVE-2023-4408)
- Do not use header_prev in expire_lru_headers</changelog>
</package>
<package pkgid="a080f54c9163a3ecd454863709720f66624021c75863d795a93ccbb32fcfacab" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.2"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-19.P2" date="1583928000">- Allow conflicting zone files with a warning (#1744081)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
</package>
<package pkgid="1abb38c6700e529a42529e87bbf40cdbaebb1fffb0ec92aaa43e5496c5648161" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-20.P2" date="1584100800">- Do not crash when nsupdate with GSS terminated early (#1300636)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
</package>
<package pkgid="530937a60bdb189f53ac764644a9bba87f1f48d03dab04d71c7441f27e5a889c" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.4"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-21.P2" date="1584360000">- Disable atomic operations also on ppc (#1779589)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
</package>
<package pkgid="2b5fb334a0f9bb6ced525df84253030a9229e03e8b398b077ddf1f8e4506032b" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.5"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-22.P2" date="1584532800">- Solve often priming queries on some forwarder (#1756201)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-23.P2" date="1589803200">- Limit number of queries triggered by a request (CVE-2020-8616)
- Fix invalid tsig request (CVE-2020-8617)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
</package>
<package pkgid="b6aa0391f6f207e81777265b607da025c21bc983531daa346f46ae00b8fa0798" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.7"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-24.P2" date="1590148800">- Add CVE tests to codebase</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
</package>
<package pkgid="c6c98bc3f84381fa06f9f8a6b0a7935d1b2df12f5434ed339d845ac9cefb99bc" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.8"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-25.P2" date="1590494400">- rebinding protection for forwarding DNS server upstream patch (#1832812)</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
</package>
<package pkgid="357c61138831871b46fada1755f27288437ac964ae1f8b04ee55dfd066914908" name="bind" arch="src">
  <version epoch="32" ver="9.11.4" rel="26.P2.el7_9.9"/>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 32:9.11.4-26.P2" date="1590753600">- Fix EDNS512 loops on broken servers</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.1" date="1598443200">- Fix tsig-request verify (CVE-2020-8622)
- Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623)
- Correct update-policy type subdomain to match documentation (CVE-2020-8624)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.2" date="1601640000">- Fix unsupported algorithms validation (#rh1769876)</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 32:9.11.4-26.P2.3" date="1604664000">- Fix inline re-signing (#rh1889902)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.4" date="1613390400">- Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.5" date="1619524800">- Possible assertion failure on DNAME processing (CVE-2021-25215)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.6" date="1621252800">- Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.7" date="1626177600">- Apply again patch 172, got removed by mistake</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.8" date="1634212800">- Prevent a race after zone load (#2011220)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 32:9.11.4-26.P2.9" date="1643025600">- Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb
  (#1935152)</changelog>
</package>
<package pkgid="632f817244e276e139100ea03dda41586c5a9b993d99f1e3ae6de0cc1a3902f6" name="bind-dyndb-ldap" arch="src">
  <version epoch="0" ver="11.1" rel="7.el7_9.1"/>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-4" date="1471348800">- resolves: #1366565 Deletion of DNS root zone breaks global forwarding</changelog>
  <changelog author="Petr Spacek &lt;pspacek@redhat.com&gt; - 10.0-5" date="1474459200">- resolves: #1376851 Unable to set named_write_master_zones boolean on upgrade</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-1" date="1489579200">- update to letest upstream version
- resolves: #1393889 Rebase to bind-dyndb-ldap 11+
- resolves: #1165796 bind-dyndb-ldap crashes if server is shutting down and connection to LDAP is down
- resolves: #1413805 bind-dyndb-ldap default schema is shipped with syntax error</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-2" date="1489579201">- bump NVR to fix bind dependencies</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-3" date="1493208000">- resolves: #1436268 crash when server_id is not present in named.conf
- coverity fixes</changelog>
  <changelog author="Tomas Krizek &lt;tkrizek@redhat.com&gt; - 11.1-4" date="1499860800">- Resolves: #1469563 required bind version doesn't have the dyndb interface</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 11.1-5" date="1527508800">- Resolves: #1580389 depend on bind with writeable home</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 11.1-6" date="1549972800">- Bump BIND version and fix library dependecies
- Rebuild for bind 9.11.3. Minor tweaks to compile.
- Support for bind 9.11.5 headers</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 11.1-7" date="1567598400">- Fix attribute templating in case of a missing default value
- Resolves: rhbz#1748904</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 11.1-7.1" date="1716379200">- Rebuild required for BIND changes for KeyTrap change (CVE-2023-50387)</changelog>
</package>
<package pkgid="1a23158812d7c8058faa36ea82d99722028faea4e3514462f65d00ae642a3a48" name="binutils" arch="src">
  <version epoch="0" ver="2.27" rel="44.base.el7_9.1"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-35.base" date="1546948800">- Stop strip crashing when removing .comment sections.  (#1644632)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-36.base" date="1546948801">- Prevent resource exhaustion attacks on libiberty's name demangling code.  (#1598561)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-37.base" date="1546948802">- Add the .attach-to-group pseudo-op to the assembler.  (#1652587)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-38.base" date="1546948803">- Disable optimizations of x06_64 PLT entries.  (#1624779)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-39.base" date="1547467200">- Fix a potential illegal memory access triggered by an integer overflow.  (#1665884)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-40.base" date="1548676800">- Enable gold for PowerPC and s390x.  (#1670014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-41.base" date="1555329600">- Fix up some linker tests that fail because of the R_x86_64_GOTPCRELX patch.  (#1699745)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-42.base" date="1568116800">- Stop the BFD library from complaining about sections with multiple sets of relocations.  (#1749085)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-44.base" date="1581595200">- Allow the BFD library to handle the copying of files which contain secondary reloc sections.  (#1785294)
- Implement assembler workaround for Intel JCC microcode bug.  (#1778892)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.27-44.base.1" date="1634904000">- Add ability to control the display of unicode characters.  (#2009168)</changelog>
</package>
<package pkgid="14ff3e1901eabb5256926ef59ed95e3074fb1870ef63d854c1e33620911e67bd" name="brasero" arch="src">
  <version epoch="0" ver="3.12.2" rel="5.el7_9.1"/>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-3" date="1383825600">- Fix ISRC handling (related: #861191)</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-4" date="1386244800">- Complete translations (related: #1030319)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Zeeshan Ali &lt;zeenix@redhat.com&gt; - 3.8.0-6" date="1389096000">- Add dep on own library (related: #1045140)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 3.8.0-8" date="1406980800">- Fix dependencies on own library</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.1-1" date="1430740800">- Update to 3.12.1
- Resolves: #1174577</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.1-2" date="1432036800">- Rebuild for totem-pl-parser (#1222884)</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.12.2-5" date="1528113600">- Update to 3.12.2
- Resolves: #1569810</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.12.2-5.1" date="1632916800">- Fix BD-R media flags (#2053594)</changelog>
</package>
<package pkgid="199238c176698fe00408f85d577f91120ded053858695df0b48343e6d9325a8d" name="buildah" arch="src">
  <version epoch="0" ver="1.11.6" rel="12.el7_9"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.11.6-3" date="1579521600">- Fix thread safety of gpgme (#1792243)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.11.6-4" date="1579867200">- resurrect s390x arch as kernel there now has the renameat2 syscall (#1773504)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.11.6-5" date="1582113600">- fix "Podman support for FIPS Mode requires a bind mount inside the container"
- Resolves: #1804186</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.11.6-6" date="1582286400">- Fix "COPY command takes long time with buildah"
- Resolves: #1756986</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.11.6-7" date="1583236800">- fix "CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull"
- Resolves: #1806936</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.11.6-8" date="1583236801">- fix "CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull"
- Resolves: #1803583</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.11.6-9" date="1584360000">- fix "CVE-2020-1702 buildah: containers/image: Container images read entire image manifest into memory"
- Resolves: #1810612</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.11.6-10" date="1585656000">- fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
- Resolves: #1817738</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.11.6-11" date="1586347200">- fix "buildah is not expanding env vars in file paths"
- Resolves: #1822031</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.11.6-12" date="1599825600">- fix "CVE-2020-14040 buildah: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-7]"
- Resolves: #1854714</changelog>
</package>
<package pkgid="f1a9aad05956e2b76dfad04807cf0b610db47912987cb6cf1952cc138bb1b12f" name="c-ares" arch="src">
  <version epoch="0" ver="1.10.0" rel="3.el7_9.1"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 1.9.1-1" date="1340625600">- update to 1.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.1-2" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-3" date="1344427200">- Include URL to the license text</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.1-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-5" date="1365681600">- Apply a patch by Stephen Gallagher to patch autoconf, not configure to
  allow optflags to be passed in by build environment
- Run autoreconf before configure
- git rm obsolete patches
- Apply upstream patch to stop overriding AC_CONFIG_MACRO_DIR</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.9.1-6" date="1365681601">- Apply an upstream patch to override AC_CONFIG_MACRO_DIR only conditionally</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.10.1-1" date="1368446400">- New upstream release 1.10
- Obsolete upstreamed patches
- Amend the multilib patch, there's no need to patch configure since we
  are running autoreconf anyways
- https://raw.github.com/bagder/c-ares/cares-1_10_0/RELEASE-NOTES</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 1.10.0-3.1" date="1686830400">- Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z]</changelog>
</package>
<package pkgid="ac864cd2006b0de9e3531e5a00265edc405dbf35af40f5ab6982d79ffa2cc396" name="ca-certificates" arch="src">
  <version epoch="0" ver="2021.2.50" rel="72.el7_9"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.14-71" date="1493380800">- Update to CKBI 2.14 from NSS 3.30.2</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.16-71" date="1506427200">- Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
  Mozilla removed code signing trust from all CAs (rhbz#1472933)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.18-71" date="1509019200">- Update to CKBI 2.18 (pre-release snapshot)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.20-71" date="1511956800">- Update to CKBI 2.20 from NSS 3.34.1</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2018.2.22-70.0" date="1521028800">- Update to CKBI 2.22 from NSS 3.35</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2019.2.32-76" date="1561118400">- Update to CKBI 2.32 from NSS 3.44
-   Removing:
-   # Certificate "Visa eCommerce Root"
-   # Certificate "AC Raiz Certicamara S.A."
-   # Certificate "TC TrustCenter Class 3 CA II"
-   # Certificate "ComSign CA"
-   # Certificate "S-TRUST Universal Root CA"
-   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
-   # Certificate "Certplus Root CA G1"
-   # Certificate "Certplus Root CA G2"
-   # Certificate "OpenTrust Root CA G1"
-   # Certificate "OpenTrust Root CA G2"
-   # Certificate "OpenTrust Root CA G3"
-  Adding:
-   # Certificate "GlobalSign Root CA - R6"
-   # Certificate "OISTE WISeKey Global Root GC CA"
-   # Certificate "GTS Root R1"
-   # Certificate "GTS Root R2"
-   # Certificate "GTS Root R3"
-   # Certificate "GTS Root R4"
-   # Certificate "UCA Global G2 Root"
-   # Certificate "UCA Extended Validation Root"
-   # Certificate "Certigna Root CA"
-   # Certificate "emSign Root CA - G1"
-   # Certificate "emSign ECC Root CA - G3"
-   # Certificate "emSign Root CA - C1"
-   # Certificate "emSign ECC Root CA - C3"
-   # Certificate "Hongkong Post Root CA 3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2020.2.41-79" date="1591704000">- Update to CKBI 2.41 from NSS 3.53.0
-    Removing:
-     # Certificate "AddTrust Low-Value Services Root"
-     # Certificate "AddTrust External Root"
-     # Certificate "UTN USERFirst Email Root CA"
-     # Certificate "Certplus Class 2 Primary CA"
-     # Certificate "Deutsche Telekom Root CA 2"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "Certinomis - Root CA"
-    Adding:
-     # Certificate "Entrust Root Certification Authority - G4"
- fix permissions on ghosted files.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.48-71" date="1623412800">- Update to CKBI 2.48 from NSS 3.66
-    Removing:
-     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root CA"
-     # Certificate "Sonera Class 2 Root CA"
-     # Certificate "Taiwan GRCA"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Trustis FPS Root CA"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
-     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
-    Adding:
-     # Certificate "Microsoft ECC Root Certificate Authority 2017"
-     # Certificate "Microsoft RSA Root Certificate Authority 2017"
-     # Certificate "e-Szigno Root CA 2017"
-     # Certificate "certSIGN Root CA G2"
-     # Certificate "Trustwave Global Certification Authority"
-     # Certificate "Trustwave Global ECC P256 Certification Authority"
-     # Certificate "Trustwave Global ECC P384 Certification Authority"
-     # Certificate "NAVER Global Root Certification Authority"
-     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
-     # Certificate "GlobalSign Secure Mail Root R45"
-     # Certificate "GlobalSign Secure Mail Root E45"
-     # Certificate "GlobalSign Root R46"
-     # Certificate "GlobalSign Root E46"
-     # Certificate "GLOBALTRUST 2020"
-     # Certificate "ANF Secure Server Root CA"
-     # Certificate "Certum EC-384 CA"
-     # Certificate "Certum Trusted Root CA"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-71" date="1623844800">- Update to CKBI 2.50 from NSS 3.67
   - version number update only</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-72" date="1631620800">- Fix expired certificate.
-    Removing:
-     # Certificate "DST Root CA X3"</changelog>
</package>
<package pkgid="c188523310a50c36be856756b51a8e872b456371756648682c20bc00285d35d1" name="ca-certificates" arch="src">
  <version epoch="0" ver="2022.2.54" rel="74.el7_9"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2018.2.22-70.0" date="1521028800">- Update to CKBI 2.22 from NSS 3.35</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2019.2.32-76" date="1561118400">- Update to CKBI 2.32 from NSS 3.44
-   Removing:
-   # Certificate "Visa eCommerce Root"
-   # Certificate "AC Raiz Certicamara S.A."
-   # Certificate "TC TrustCenter Class 3 CA II"
-   # Certificate "ComSign CA"
-   # Certificate "S-TRUST Universal Root CA"
-   # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5"
-   # Certificate "Certplus Root CA G1"
-   # Certificate "Certplus Root CA G2"
-   # Certificate "OpenTrust Root CA G1"
-   # Certificate "OpenTrust Root CA G2"
-   # Certificate "OpenTrust Root CA G3"
-  Adding:
-   # Certificate "GlobalSign Root CA - R6"
-   # Certificate "OISTE WISeKey Global Root GC CA"
-   # Certificate "GTS Root R1"
-   # Certificate "GTS Root R2"
-   # Certificate "GTS Root R3"
-   # Certificate "GTS Root R4"
-   # Certificate "UCA Global G2 Root"
-   # Certificate "UCA Extended Validation Root"
-   # Certificate "Certigna Root CA"
-   # Certificate "emSign Root CA - G1"
-   # Certificate "emSign ECC Root CA - G3"
-   # Certificate "emSign Root CA - C1"
-   # Certificate "emSign ECC Root CA - C3"
-   # Certificate "Hongkong Post Root CA 3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2020.2.41-79" date="1591704000">- Update to CKBI 2.41 from NSS 3.53.0
-    Removing:
-     # Certificate "AddTrust Low-Value Services Root"
-     # Certificate "AddTrust External Root"
-     # Certificate "UTN USERFirst Email Root CA"
-     # Certificate "Certplus Class 2 Primary CA"
-     # Certificate "Deutsche Telekom Root CA 2"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "Certinomis - Root CA"
-    Adding:
-     # Certificate "Entrust Root Certification Authority - G4"
- fix permissions on ghosted files.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.48-71" date="1623412800">- Update to CKBI 2.48 from NSS 3.66
-    Removing:
-     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root CA"
-     # Certificate "Sonera Class 2 Root CA"
-     # Certificate "Taiwan GRCA"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Trustis FPS Root CA"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
-     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
-    Adding:
-     # Certificate "Microsoft ECC Root Certificate Authority 2017"
-     # Certificate "Microsoft RSA Root Certificate Authority 2017"
-     # Certificate "e-Szigno Root CA 2017"
-     # Certificate "certSIGN Root CA G2"
-     # Certificate "Trustwave Global Certification Authority"
-     # Certificate "Trustwave Global ECC P256 Certification Authority"
-     # Certificate "Trustwave Global ECC P384 Certification Authority"
-     # Certificate "NAVER Global Root Certification Authority"
-     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
-     # Certificate "GlobalSign Secure Mail Root R45"
-     # Certificate "GlobalSign Secure Mail Root E45"
-     # Certificate "GlobalSign Root R46"
-     # Certificate "GlobalSign Root E46"
-     # Certificate "GLOBALTRUST 2020"
-     # Certificate "ANF Secure Server Root CA"
-     # Certificate "Certum EC-384 CA"
-     # Certificate "Certum Trusted Root CA"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-71" date="1623844800">- Update to CKBI 2.50 from NSS 3.67
   - version number update only</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-72" date="1631620800">- Fix expired certificate.
-    Removing:
-     # Certificate "DST Root CA X3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-71" date="1657540800">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "GlobalSign Root CA - R2"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
-    Adding:
-     # Certificate "TunTrust Root CA"
-     # Certificate "HARICA TLS RSA Root CA 2021"
-     # Certificate "HARICA TLS ECC Root CA 2021"
-     # Certificate "HARICA Client RSA Root CA 2021"
-     # Certificate "HARICA Client ECC Root CA 2021"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "vTrus ECC Root CA"
-     # Certificate "vTrus Root CA"
-     # Certificate "ISRG Root X2"
-     # Certificate "HiPKI Root CA - G1"
-     # Certificate "Telia Root CA v2"
-     # Certificate "D-TRUST BR Root CA 1 2020"
-     # Certificate "D-TRUST EV Root CA 1 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-72" date="1657886400">- Update to CKBI 2.54 from NSS 3.79
-    Adding:
-     # Certificate "CAEDICOM Root"
-     # Certificate "I.CA Root CA/RSA"
-     # Certificate "MULTICERT Root Certification Authority 01"
-     # Certificate "Certification Authority of WoSign G2"
-     # Certificate "CA WoSign ECC Root"
-     # Certificate "CCA India 2015 SPL"
-     # Certificate "Swedish Government Root Authority v3"
-     # Certificate "Swedish Government Root Authority v2"
-     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
-     # Certificate "OpenTrust Root CA G1"
-     # Certificate "OpenTrust Root CA G2"
-     # Certificate "OpenTrust Root CA G3"
-     # Certificate "Certplus Root CA G1"
-     # Certificate "Certplus Root CA G2"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Thailand National Root Certification Authority - G1"
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Certification Authority of WoSign"
-     # Certificate "CA 沃通根证书"
-     # Certificate "SSC GDL CA Root B"
-     # Certificate "SAPO Class 2 Root CA"
-     # Certificate "SAPO Class 3 Root CA"
-     # Certificate "SAPO Class 4 Root CA"
-     # Certificate "CA Disig Root R1"
-     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
-     # Certificate "ApplicationCA2 Root"
-     # Certificate "GlobalSign"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Halcom Root CA"
-     # Certificate "Swisscom Root EV CA 2"
-     # Certificate "CFCA GT CA"
-     # Certificate "Digidentity L3 Root CA - G2"
-     # Certificate "SITHS Root CA v1"
-     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "IGC/A AC racine Etat francais"
-     # Certificate "PersonalID Trustworthy RootCA 2011"
-     # Certificate "Swedish Government Root Authority v1"
-     # Certificate "Swiss Government Root CA II"
-     # Certificate "Swiss Government Root CA I"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "LuxTrust Global Root"
-     # Certificate "AC1 RAIZ MTIN"
-     # Certificate "Microsoft Root Certificate Authority 2011"
-     # Certificate "CCA India 2011"
-     # Certificate "ANCERT Certificados Notariales V2"
-     # Certificate "ANCERT Certificados CGN V2"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "DigiNotar Root CA G2"
-     # Certificate "Federal Common Policy CA"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "China Internet Network Information Center EV Certificates Root"
-     # Certificate "Verizon Global Root CA"
-     # Certificate "SwissSign Silver Root CA - G3"
-     # Certificate "SwissSign Platinum Root CA - G3"
-     # Certificate "SwissSign Gold Root CA - G3"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "SITHS CA v3"
-     # Certificate "Certinomis - Autorité Racine"
-     # Certificate "ANF Server CA"
-     # Certificate "Thawte Premium Server CA"
-     # Certificate "Thawte Server CA"
-     # Certificate "TC TrustCenter Universal CA III"
-     # Certificate "KEYNECTIS ROOT CA"
-     # Certificate "I.CA - Standard Certification Authority, 09/2009"
-     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
-     # Certificate "VI Registru Centras RCSC (RootCA)"
-     # Certificate "CCA India 2007"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
-     # Certificate "ipsCA Global CA Root"
-     # Certificate "ipsCA Main CA Root"
-     # Certificate "Actalis Authentication CA G1"
-     # Certificate "A-Trust-Qual-03"
-     # Certificate "AddTrust External CA Root"
-     # Certificate "ECRaizEstado"
-     # Certificate "Configuration"
-     # Certificate "FNMT-RCM"
-     # Certificate "StartCom Certification Authority"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "E-ME SSI (RCA)"
-     # Certificate "ACEDICOM Root"
-     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
-     # Certificate "Correo Uruguayo - Root CA"
-     # Certificate "CNNIC ROOT"
-     # Certificate "Common Policy"
-     # Certificate "Macao Post eSignTrust Root Certification Authority"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "Cisco Root CA 2048"
-     # Certificate "CA Disig"
-     # Certificate "InfoNotary CSP Root"
-     # Certificate "UCA Global Root"
-     # Certificate "UCA Root"
-     # Certificate "DigiNotar Root CA"
-     # Certificate "Starfield Services Root Certificate Authority"
-     # Certificate "I.CA - Qualified root certificate"
-     # Certificate "I.CA - Standard root certificate"
-     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
-     # Certificate "Japanese Government"
-     # Certificate "AdminCA-CD-T01"
-     # Certificate "Admin-Root-CA"
-     # Certificate "Izenpe.com"
-     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
-     # Certificate "Halcom CA FO"
-     # Certificate "Halcom CA PO 2"
-     # Certificate "Root CA"
-     # Certificate "GPKIRootCA"
-     # Certificate "ACNLB"
-     # Certificate "state-institutions"
-     # Certificate "state-institutions"
-     # Certificate "SECOM Trust Systems CO.,LTD."
-     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
-     # Certificate "D-TRUST Root Class 2 CA 2007"
-     # Certificate "D-TRUST Root Class 3 CA 2007"
-     # Certificate "SSC Root CA A"
-     # Certificate "SSC Root CA B"
-     # Certificate "SSC Root CA C"
-     # Certificate "Autoridad de Certificacion de la Abogacia"
-     # Certificate "Root CA Generalitat Valenciana"
-     # Certificate "VAS Latvijas Pasts SSI(RCA)"
-     # Certificate "ANCERT Certificados CGN"
-     # Certificate "ANCERT Certificados Notariales"
-     # Certificate "ANCERT Corporaciones de Derecho Publico"
-     # Certificate "GLOBALTRUST"
-     # Certificate "Certipost E-Trust TOP Root CA"
-     # Certificate "Certipost E-Trust Primary Qualified CA"
-     # Certificate "Certipost E-Trust Primary Normalised CA"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "GlobalSign"
-     # Certificate "IGC/A"
-     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
-     # Certificate "TC TrustCenter Universal CA I"
-     # Certificate "TC TrustCenter Universal CA II"
-     # Certificate "TC TrustCenter Class 2 CA II"
-     # Certificate "TC TrustCenter Class 4 CA II"
-     # Certificate "Swisscom Root CA 1"
-     # Certificate "Microsec e-Szigno Root CA"
-     # Certificate "LGPKI"
-     # Certificate "AC RAIZ DNIE"
-     # Certificate "Common Policy"
-     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "CertRSA01"
-     # Certificate "KISA RootCA 1"
-     # Certificate "KISA RootCA 3"
-     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
-     # Certificate "A-CERT ADVANCED"
-     # Certificate "A-Trust-Qual-01"
-     # Certificate "A-Trust-nQual-01"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Staat der Nederlanden Root CA"
-     # Certificate "Serasa Certificate Authority II"
-     # Certificate "TDC Internet"
-     # Certificate "America Online Root Certification Authority 2"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "RSA Security Inc"
-     # Certificate "Public Notary Root"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Global CA 2"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root Certification Authority"
-     # Certificate "Autoridade Certificadora Raiz Brasileira"
-     # Certificate "Post.Trust Root CA"
-     # Certificate "Microsoft Root Authority"
-     # Certificate "Microsoft Root Certificate Authority"
-     # Certificate "Microsoft Root Certificate Authority 2010"
-     # Certificate "Entrust.net Secure Server Certification Authority"
-     # Certificate "UTN-USERFirst-Object"
-     # Certificate "BYTE Root Certification Authority 001"
-     # Certificate "CISRCA1"
-     # Certificate "ePKI Root Certification Authority - G2"
-     # Certificate "ePKI EV SSL Certification Authority - G1"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "SSL.com EV Root Certification Authority RSA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "ACA ROOT"
-     # Certificate "Security Communication ECC RootCA1"
-     # Certificate "Security Communication RootCA3"
-     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
-     # Certificate "Network Solutions RSA Certificate Authority"
-     # Certificate "Network Solutions ECC Certificate Authority"
-     # Certificate "Australian Defence Public Root CA"
-     # Certificate "SI-TRUST Root"
-     # Certificate "Halcom Root Certificate Authority"
-     # Certificate "Application CA G3 Root"
-     # Certificate "GLOBALTRUST 2015"
-     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
-     # Certificate "emSign Root CA - G2"
-     # Certificate "emSign Root CA - C2"
-     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
-     # Certificate "DigiCert CS ECC P384 Root G5"
-     # Certificate "DigiCert CS RSA4096 Root G5"
-     # Certificate "DigiCert RSA4096 Root G5"
-     # Certificate "DigiCert ECC P384 Root G5"
-     # Certificate "HARICA Code Signing RSA Root CA 2021"
-     # Certificate "HARICA Code Signing ECC Root CA 2021"
-     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-73" date="1658923200">- Update to CKBI 2.54 from NSS 3.79</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-74" date="1659009600">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "Izenpe.com"
-     # Certificate "state-institutions"
-     # Certificate "GlobalSign"
-     # Certificate "Common Policy"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "AC Raíz Certicámara S.A."</changelog>
</package>
<package pkgid="3983462b86e543c109fbe07cd3539607605a532c6b5c84239c9c727de3a5d7b4" name="ca-certificates" arch="src">
  <version epoch="0" ver="2023.2.60_v7.0.306" rel="72.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2020.2.41-79" date="1591704000">- Update to CKBI 2.41 from NSS 3.53.0
-    Removing:
-     # Certificate "AddTrust Low-Value Services Root"
-     # Certificate "AddTrust External Root"
-     # Certificate "UTN USERFirst Email Root CA"
-     # Certificate "Certplus Class 2 Primary CA"
-     # Certificate "Deutsche Telekom Root CA 2"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "Certinomis - Root CA"
-    Adding:
-     # Certificate "Entrust Root Certification Authority - G4"
- fix permissions on ghosted files.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.48-71" date="1623412800">- Update to CKBI 2.48 from NSS 3.66
-    Removing:
-     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root CA"
-     # Certificate "Sonera Class 2 Root CA"
-     # Certificate "Taiwan GRCA"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Trustis FPS Root CA"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
-     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
-    Adding:
-     # Certificate "Microsoft ECC Root Certificate Authority 2017"
-     # Certificate "Microsoft RSA Root Certificate Authority 2017"
-     # Certificate "e-Szigno Root CA 2017"
-     # Certificate "certSIGN Root CA G2"
-     # Certificate "Trustwave Global Certification Authority"
-     # Certificate "Trustwave Global ECC P256 Certification Authority"
-     # Certificate "Trustwave Global ECC P384 Certification Authority"
-     # Certificate "NAVER Global Root Certification Authority"
-     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
-     # Certificate "GlobalSign Secure Mail Root R45"
-     # Certificate "GlobalSign Secure Mail Root E45"
-     # Certificate "GlobalSign Root R46"
-     # Certificate "GlobalSign Root E46"
-     # Certificate "GLOBALTRUST 2020"
-     # Certificate "ANF Secure Server Root CA"
-     # Certificate "Certum EC-384 CA"
-     # Certificate "Certum Trusted Root CA"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-71" date="1623844800">- Update to CKBI 2.50 from NSS 3.67
   - version number update only</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2021.2.50-72" date="1631620800">- Fix expired certificate.
-    Removing:
-     # Certificate "DST Root CA X3"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-71" date="1657540800">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "GlobalSign Root CA - R2"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
-    Adding:
-     # Certificate "TunTrust Root CA"
-     # Certificate "HARICA TLS RSA Root CA 2021"
-     # Certificate "HARICA TLS ECC Root CA 2021"
-     # Certificate "HARICA Client RSA Root CA 2021"
-     # Certificate "HARICA Client ECC Root CA 2021"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "vTrus ECC Root CA"
-     # Certificate "vTrus Root CA"
-     # Certificate "ISRG Root X2"
-     # Certificate "HiPKI Root CA - G1"
-     # Certificate "Telia Root CA v2"
-     # Certificate "D-TRUST BR Root CA 1 2020"
-     # Certificate "D-TRUST EV Root CA 1 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-72" date="1657886400">- Update to CKBI 2.54 from NSS 3.79
-    Adding:
-     # Certificate "CAEDICOM Root"
-     # Certificate "I.CA Root CA/RSA"
-     # Certificate "MULTICERT Root Certification Authority 01"
-     # Certificate "Certification Authority of WoSign G2"
-     # Certificate "CA WoSign ECC Root"
-     # Certificate "CCA India 2015 SPL"
-     # Certificate "Swedish Government Root Authority v3"
-     # Certificate "Swedish Government Root Authority v2"
-     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
-     # Certificate "OpenTrust Root CA G1"
-     # Certificate "OpenTrust Root CA G2"
-     # Certificate "OpenTrust Root CA G3"
-     # Certificate "Certplus Root CA G1"
-     # Certificate "Certplus Root CA G2"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Thailand National Root Certification Authority - G1"
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Certification Authority of WoSign"
-     # Certificate "CA 沃通根证书"
-     # Certificate "SSC GDL CA Root B"
-     # Certificate "SAPO Class 2 Root CA"
-     # Certificate "SAPO Class 3 Root CA"
-     # Certificate "SAPO Class 4 Root CA"
-     # Certificate "CA Disig Root R1"
-     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
-     # Certificate "ApplicationCA2 Root"
-     # Certificate "GlobalSign"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
-     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
-     # Certificate "Halcom Root CA"
-     # Certificate "Swisscom Root EV CA 2"
-     # Certificate "CFCA GT CA"
-     # Certificate "Digidentity L3 Root CA - G2"
-     # Certificate "SITHS Root CA v1"
-     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
-     # Certificate "Swisscom Root CA 2"
-     # Certificate "IGC/A AC racine Etat francais"
-     # Certificate "PersonalID Trustworthy RootCA 2011"
-     # Certificate "Swedish Government Root Authority v1"
-     # Certificate "Swiss Government Root CA II"
-     # Certificate "Swiss Government Root CA I"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "LuxTrust Global Root"
-     # Certificate "AC1 RAIZ MTIN"
-     # Certificate "Microsoft Root Certificate Authority 2011"
-     # Certificate "CCA India 2011"
-     # Certificate "ANCERT Certificados Notariales V2"
-     # Certificate "ANCERT Certificados CGN V2"
-     # Certificate "EE Certification Centre Root CA"
-     # Certificate "DigiNotar Root CA G2"
-     # Certificate "Federal Common Policy CA"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "China Internet Network Information Center EV Certificates Root"
-     # Certificate "Verizon Global Root CA"
-     # Certificate "SwissSign Silver Root CA - G3"
-     # Certificate "SwissSign Platinum Root CA - G3"
-     # Certificate "SwissSign Gold Root CA - G3"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "SITHS CA v3"
-     # Certificate "Certinomis - Autorité Racine"
-     # Certificate "ANF Server CA"
-     # Certificate "Thawte Premium Server CA"
-     # Certificate "Thawte Server CA"
-     # Certificate "TC TrustCenter Universal CA III"
-     # Certificate "KEYNECTIS ROOT CA"
-     # Certificate "I.CA - Standard Certification Authority, 09/2009"
-     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
-     # Certificate "VI Registru Centras RCSC (RootCA)"
-     # Certificate "CCA India 2007"
-     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
-     # Certificate "ipsCA Global CA Root"
-     # Certificate "ipsCA Main CA Root"
-     # Certificate "Actalis Authentication CA G1"
-     # Certificate "A-Trust-Qual-03"
-     # Certificate "AddTrust External CA Root"
-     # Certificate "ECRaizEstado"
-     # Certificate "Configuration"
-     # Certificate "FNMT-RCM"
-     # Certificate "StartCom Certification Authority"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
-     # Certificate "thawte Primary Root CA - G2"
-     # Certificate "GeoTrust Primary Certification Authority - G2"
-     # Certificate "VeriSign Universal Root Certification Authority"
-     # Certificate "thawte Primary Root CA - G3"
-     # Certificate "GeoTrust Primary Certification Authority - G3"
-     # Certificate "E-ME SSI (RCA)"
-     # Certificate "ACEDICOM Root"
-     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
-     # Certificate "Correo Uruguayo - Root CA"
-     # Certificate "CNNIC ROOT"
-     # Certificate "Common Policy"
-     # Certificate "Macao Post eSignTrust Root Certification Authority"
-     # Certificate "Staat der Nederlanden Root CA - G2"
-     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "Cisco Root CA 2048"
-     # Certificate "CA Disig"
-     # Certificate "InfoNotary CSP Root"
-     # Certificate "UCA Global Root"
-     # Certificate "UCA Root"
-     # Certificate "DigiNotar Root CA"
-     # Certificate "Starfield Services Root Certificate Authority"
-     # Certificate "I.CA - Qualified root certificate"
-     # Certificate "I.CA - Standard root certificate"
-     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
-     # Certificate "Japanese Government"
-     # Certificate "AdminCA-CD-T01"
-     # Certificate "Admin-Root-CA"
-     # Certificate "Izenpe.com"
-     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
-     # Certificate "Halcom CA FO"
-     # Certificate "Halcom CA PO 2"
-     # Certificate "Root CA"
-     # Certificate "GPKIRootCA"
-     # Certificate "ACNLB"
-     # Certificate "state-institutions"
-     # Certificate "state-institutions"
-     # Certificate "SECOM Trust Systems CO.,LTD."
-     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
-     # Certificate "D-TRUST Root Class 2 CA 2007"
-     # Certificate "D-TRUST Root Class 3 CA 2007"
-     # Certificate "SSC Root CA A"
-     # Certificate "SSC Root CA B"
-     # Certificate "SSC Root CA C"
-     # Certificate "Autoridad de Certificacion de la Abogacia"
-     # Certificate "Root CA Generalitat Valenciana"
-     # Certificate "VAS Latvijas Pasts SSI(RCA)"
-     # Certificate "ANCERT Certificados CGN"
-     # Certificate "ANCERT Certificados Notariales"
-     # Certificate "ANCERT Corporaciones de Derecho Publico"
-     # Certificate "GLOBALTRUST"
-     # Certificate "Certipost E-Trust TOP Root CA"
-     # Certificate "Certipost E-Trust Primary Qualified CA"
-     # Certificate "Certipost E-Trust Primary Normalised CA"
-     # Certificate "Cybertrust Global Root"
-     # Certificate "GlobalSign"
-     # Certificate "IGC/A"
-     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
-     # Certificate "TC TrustCenter Universal CA I"
-     # Certificate "TC TrustCenter Universal CA II"
-     # Certificate "TC TrustCenter Class 2 CA II"
-     # Certificate "TC TrustCenter Class 4 CA II"
-     # Certificate "Swisscom Root CA 1"
-     # Certificate "Microsec e-Szigno Root CA"
-     # Certificate "LGPKI"
-     # Certificate "AC RAIZ DNIE"
-     # Certificate "Common Policy"
-     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "CertRSA01"
-     # Certificate "KISA RootCA 1"
-     # Certificate "KISA RootCA 3"
-     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
-     # Certificate "A-CERT ADVANCED"
-     # Certificate "A-Trust-Qual-01"
-     # Certificate "A-Trust-nQual-01"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Staat der Nederlanden Root CA"
-     # Certificate "Serasa Certificate Authority II"
-     # Certificate "TDC Internet"
-     # Certificate "America Online Root Certification Authority 2"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "RSA Security Inc"
-     # Certificate "Public Notary Root"
-     # Certificate "GeoTrust Global CA"
-     # Certificate "GeoTrust Global CA 2"
-     # Certificate "GeoTrust Universal CA"
-     # Certificate "GeoTrust Universal CA 2"
-     # Certificate "QuoVadis Root Certification Authority"
-     # Certificate "Autoridade Certificadora Raiz Brasileira"
-     # Certificate "Post.Trust Root CA"
-     # Certificate "Microsoft Root Authority"
-     # Certificate "Microsoft Root Certificate Authority"
-     # Certificate "Microsoft Root Certificate Authority 2010"
-     # Certificate "Entrust.net Secure Server Certification Authority"
-     # Certificate "UTN-USERFirst-Object"
-     # Certificate "BYTE Root Certification Authority 001"
-     # Certificate "CISRCA1"
-     # Certificate "ePKI Root Certification Authority - G2"
-     # Certificate "ePKI EV SSL Certification Authority - G1"
-     # Certificate "AC Raíz Certicámara S.A."
-     # Certificate "SSL.com EV Root Certification Authority RSA"
-     # Certificate "LuxTrust Global Root 2"
-     # Certificate "ACA ROOT"
-     # Certificate "Security Communication ECC RootCA1"
-     # Certificate "Security Communication RootCA3"
-     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
-     # Certificate "Network Solutions RSA Certificate Authority"
-     # Certificate "Network Solutions ECC Certificate Authority"
-     # Certificate "Australian Defence Public Root CA"
-     # Certificate "SI-TRUST Root"
-     # Certificate "Halcom Root Certificate Authority"
-     # Certificate "Application CA G3 Root"
-     # Certificate "GLOBALTRUST 2015"
-     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
-     # Certificate "emSign Root CA - G2"
-     # Certificate "emSign Root CA - C2"
-     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
-     # Certificate "DigiCert CS ECC P384 Root G5"
-     # Certificate "DigiCert CS RSA4096 Root G5"
-     # Certificate "DigiCert RSA4096 Root G5"
-     # Certificate "DigiCert ECC P384 Root G5"
-     # Certificate "HARICA Code Signing RSA Root CA 2021"
-     # Certificate "HARICA Code Signing ECC Root CA 2021"
-     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-73" date="1658923200">- Update to CKBI 2.54 from NSS 3.79</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 2022.2.54-74" date="1659009600">- Update to CKBI 2.54 from NSS 3.79
-    Removing:
-     # Certificate "TrustCor ECA-1"
-     # Certificate "TrustCor RootCert CA-2"
-     # Certificate "TrustCor RootCert CA-1"
-     # Certificate "Network Solutions Certificate Authority"
-     # Certificate "COMODO Certification Authority"
-     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
-     # Certificate "Microsec e-Szigno Root CA 2009"
-     # Certificate "TWCA Root Certification Authority"
-     # Certificate "Izenpe.com"
-     # Certificate "state-institutions"
-     # Certificate "GlobalSign"
-     # Certificate "Common Policy"
-     # Certificate "A-Trust-nQual-03"
-     # Certificate "A-Trust-Qual-02"
-     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
-     # Certificate "Government Root Certification Authority"
-     # Certificate "AC Raíz Certicámara S.A."</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 2023.2.60_v7.0.306-71" date="1690891200">- Update to CKBI 2.60_v7.0.306 from NSS 3.91
-    Removing:
-     # Certificate "Camerfirma Global Chambersign Root"
-     # Certificate "Staat der Nederlanden EV Root CA"
-     # Certificate "OpenTrust Root CA G1"
-     # Certificate "Swedish Government Root Authority v1"
-     # Certificate "DigiNotar Root CA G2"
-     # Certificate "Federal Common Policy CA"
-     # Certificate "TC TrustCenter Universal CA III"
-     # Certificate "CCA India 2007"
-     # Certificate "ipsCA Global CA Root"
-     # Certificate "ipsCA Main CA Root"
-     # Certificate "Macao Post eSignTrust Root Certification Authority"
-     # Certificate "InfoNotary CSP Root"
-     # Certificate "DigiNotar Root CA"
-     # Certificate "Root CA"
-     # Certificate "GPKIRootCA"
-     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
-     # Certificate "TC TrustCenter Universal CA I"
-     # Certificate "TC TrustCenter Universal CA II"
-     # Certificate "TC TrustCenter Class 2 CA II"
-     # Certificate "TC TrustCenter Class 4 CA II"
-     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "CertRSA01"
-     # Certificate "KISA RootCA 3"
-     # Certificate "A-CERT ADVANCED"
-     # Certificate "A-Trust-Qual-01"
-     # Certificate "A-Trust-nQual-01"
-     # Certificate "Serasa Certificate Authority II"
-     # Certificate "TDC Internet"
-     # Certificate "America Online Root Certification Authority 2"
-     # Certificate "RSA Security Inc"
-     # Certificate "Public Notary Root"
-     # Certificate "Autoridade Certificadora Raiz Brasileira"
-     # Certificate "Post.Trust Root CA"
-     # Certificate "Entrust.net Secure Server Certification Authority"
-     # Certificate "ePKI EV SSL Certification Authority - G1"
-    Adding:
-     # Certificate "DigiCert TLS ECC P384 Root G5"
-     # Certificate "DigiCert TLS RSA4096 Root G5"
-     # Certificate "DigiCert SMIME ECC P384 Root G5"
-     # Certificate "DigiCert SMIME RSA4096 Root G5"
-     # Certificate "Certainly Root R1"
-     # Certificate "Certainly Root E1"
-     # Certificate "E-Tugra Global Root CA RSA v3"
-     # Certificate "E-Tugra Global Root CA ECC v3"
-     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
-     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
-     # Certificate "BJCA Global Root CA1"
-     # Certificate "BJCA Global Root CA2"
-     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
-     # Certificate "A-Trust-Root-05"
-     # Certificate "ADOCA02"
-     # Certificate "StartCom Certification Authority G2"
-     # Certificate "ATHEX Root CA"
-     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
-     # Certificate "GeoTrust Primary Certification Authority"
-     # Certificate "thawte Primary Root CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
-     # Certificate "America Online Root Certification Authority 1"
-     # Certificate "Juur-SK"
-     # Certificate "ComSign CA"
-     # Certificate "ComSign Secured CA"
-     # Certificate "ComSign Advanced Security CA"
-     # Certificate "Global Chambersign Root"
-     # Certificate "Sonera Class2 CA"
-     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
-     # Certificate "VeriSign, Inc."
-     # Certificate "GTE CyberTrust Global Root"
-     # Certificate "Equifax Secure Global eBusiness CA-1"
-     # Certificate "Equifax"
-     # Certificate "Class 1 Primary CA"
-     # Certificate "Swiss Government Root CA III"
-     # Certificate "Application CA G4 Root"
-     # Certificate "SSC GDL CA Root A"
-     # Certificate "GlobalSign Code Signing Root E45"
-     # Certificate "GlobalSign Code Signing Root R45"
-     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 2023.2.60_v7.0.306-72" date="1694001600">- hand merge the two 'GlobalSign ECC Root CA R4' certs together and the two 'AC RAIZ FNMT-RCM' certs together to keep p11kit from getting confused.</changelog>
</package>
<package pkgid="68cb5e2140e87ace70458672287c66627572151dec1b3d330edc969f2e04f0c5" name="certmonger" arch="src">
  <version epoch="0" ver="0.78.4" rel="15.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-6" date="1527595200">- Remove reference to unused patch</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-7" date="1531828800">- Pass _PROXY, _proxy, LANG and LC_* environment variables to
  helpers (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828801">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
</package>
<package pkgid="03f1f93597b722371c148a6337740c622800a7955807d237a95ea4c6ca46ad37" name="certmonger" arch="src">
  <version epoch="0" ver="0.78.4" rel="16.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-7" date="1531828800">- Pass _PROXY, _proxy, LANG and LC_* environment variables to
  helpers (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828801">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-16" date="1632139200">- Fix file descriptor leak when executing CA helpers (#1992439)</changelog>
</package>
<package pkgid="eefc5c0bb320e467334b49bdd131fa94f9841a1d575628aed7f6f2a28f0fc4ac" name="certmonger" arch="src">
  <version epoch="0" ver="0.78.4" rel="17.el7_9"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-8" date="1531828800">- Disable iterate-10 test which fails intermitently (#1596161)
- Add BuildRequires for running autoreconf</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-9" date="1534161600">- Remove patch to pass _PROXY, _proxy, LANG and LC_* environment
  variables to helpers. The root cause was a bug in IPA (#1596161)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-10" date="1535112000">- Backport patches to add support for the MS Certificate Template V2
  extension (#1622184)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-11" date="1549972800">- Increase SCEP spec compliance, set more secure default cipher and hash.
  (#1533216)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-12" date="1564574400">- Add documentation for the '-N' option to the dogtag-ipa-renew-agent-submit
  man page (#1651368)
- SCEP: Don't set message=&lt;ca ident&gt; with GetCaps and GetCACert (#1608781)
- SCEP operation GetCAChain is not valid. Should be GetCACertChain (#1590727)
- Document owner and permission parameters to getcert (#1549585)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-13" date="1588334400">- Ensure that files read in have a trailing new-line (#1814976)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-14" date="1590148800">- Include &amp;message=CA-IDENT with GetCACaps/GetCACert requests (#1839181)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-15" date="1623240000">- Don't report spurious error if no SCEP pkiMessage is ready yet (#1969854)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-16" date="1632139200">- Fix file descriptor leak when executing CA helpers (#1992439)</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-17" date="1634644800">- certmonger creates CSRs with invalid DER syntax for X509v3 extensions
  with critical=FALSE (#2015511)</changelog>
</package>
<package pkgid="9c16af9405f82d183eb252a5819b5ed61a9d385701ed842e059b2854b8dc5cdf" name="cloud-init" arch="src">
  <version epoch="0" ver="19.4" rel="7.el7_9.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 18.5-5.el7" date="1568116800">- ci-Fix-for-network-configuration-not-persisting-after-r.patch [bz#1593010]
- Resolves: bz#1593010
  ([cloud-init][RHVM]cloud-init network configuration does not persist reboot [RHEL 7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 18.5-6.el7" date="1571918400">- ci-util-json.dumps-on-python-2.7-will-handle-UnicodeDec.patch [bz#1744526]
- Resolves: bz#1744526
  ([cloud-init][OpenStack] cloud-init can't persist instance-data.json)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-1.el7" date="1584446400">- Rebase to 19.4 [bz#1803094]
- Resolves: bz#1803094
  ([RHEL-7.9] cloud-init rebase to 19.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-2.el7" date="1584619200">- ci-Removing-cloud-user-from-wheel.patch [bz#1549638]
- ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
- ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
- ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
- ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
- Resolves: bz#1549638
  ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
- Resolves: bz#1574338
  (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1812170
  (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
- Resolves: bz#1812173
  (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-3.el7" date="1585569600">- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
</package>
<package pkgid="c5b4c4293cf685d8b463e5c036e64d65e338d99882877b579c9ea579b9c020e0" name="cloud-init" arch="src">
  <version epoch="0" ver="19.4" rel="7.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-1.el7" date="1584446400">- Rebase to 19.4 [bz#1803094]
- Resolves: bz#1803094
  ([RHEL-7.9] cloud-init rebase to 19.4)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-2.el7" date="1584619200">- ci-Removing-cloud-user-from-wheel.patch [bz#1549638]
- ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
- ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
- ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
- ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
- Resolves: bz#1549638
  ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
- Resolves: bz#1574338
  (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1812170
  (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
- Resolves: bz#1812173
  (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-3.el7" date="1585569600">- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009600">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009601">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
  ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
</package>
<package pkgid="1021a8be8e74f2cc411529785fc5f673d1871785cde4b8a7881e342184b556de" name="cloud-init" arch="src">
  <version epoch="0" ver="19.4" rel="7.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-2.el7" date="1584619200">- ci-Removing-cloud-user-from-wheel.patch [bz#1549638]
- ci-Remove-race-condition-between-cloud-init-and-Network.patch [bz#1748015]
- ci-cc_set_password-increase-random-pwlength-from-9-to-2.patch [bz#1812170]
- ci-utils-use-SystemRandom-when-generating-random-passwo.patch [bz#1812173]
- ci-Enable-ssh_deletekeys-by-default.patch [bz#1574338]
- Resolves: bz#1549638
  ([RHEL7]cloud-user added to wheel group and sudoers.d causes 'sudo -v' prompts for passphrase)
- Resolves: bz#1574338
  (CVE-2018-10896 cloud-init: SSH host keys are not regenerated for the new instances [rhel-7])
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1812170
  (CVE-2020-8632 cloud-init: Too short random password length in cc_set_password in config/cc_set_passwords.py [rhel-7])
- Resolves: bz#1812173
  (CVE-2020-8631 cloud-init: Use of random.choice when generating random password [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-3.el7" date="1585569600">- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009600">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009601">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
  ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.4" date="1613476800">- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
- Resolves: bz#1900807
  (Update existing user password RHEL7x)</changelog>
</package>
<package pkgid="bd8ef46034ee66e50b17629bc2f3dd6a94e3f3aed99717367aa4901b958249fd" name="cloud-init" arch="src">
  <version epoch="0" ver="19.4" rel="7.el7_9.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-3.el7" date="1585569600">- ci-Do-not-use-fallocate-in-swap-file-creation-on-xfs.-7.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009600">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009601">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
  ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.4" date="1613476800">- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
- Resolves: bz#1900807
  (Update existing user password RHEL7x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7_9.5" date="1624968000">- ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1897616]
- Resolves: bz#1897616
  ([rhel-7]cloud-final.service fails if NetworkManager not installed.)</changelog>
</package>
<package pkgid="c8f3c131fd23c18c221caf091fe6b7346a5853871757d603f4f3263ab561a46f" name="cloud-init" arch="src">
  <version epoch="0" ver="19.4" rel="7.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-4.el7" date="1586952000">- ci-swap-file-size-being-used-before-checked-if-str-315.patch [bz#1772505]
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-5.el7" date="1587988800">- ci-Remove-race-condition-between-cloud-init-and-Network-v2.patch [bz#1748015]
- ci-cc_mounts-fix-incorrect-format-specifiers-316.patch [bz#1772505]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1772505
  ([RHEL7] swapon fails with "swapfile has holes" when created on a xfs filesystem by cloud-init)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-6.el7" date="1589198400">- ci-Use-reload-or-try-restart-instead-of-try-reload-or-r.patch [bz#1748015]
- ci-ec2-Do-not-log-IMDSv2-token-values-instead-use-REDAC.patch [bz#1821999]
- Resolves: bz#1748015
  ([cloud-init][RHEL7] /etc/resolv.conf lose config after reboot (initial instance is ok))
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7" date="1589976000">- ci-ec2-only-redact-token-request-headers-in-logs-avoid-.patch [bz#1821999]
- Resolves: bz#1821999
  ([RHEL7.9] Do not log IMDSv2 token values into cloud-init.log)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.2" date="1603454400">- ci-When-tools.conf-does-not-exist-running-cmd-vmware-to.patch [bz#1839619]
- ci-Changing-notation-of-subp-call.patch [bz#1839619]
- ci-DHCP-sandboxing-failing-on-noexec-mounted-var-tmp-52.patch [bz#1871916]
- Resolves: bz#1839619
  ([ESXi][RHEL7.9][cloud-init]ERROR log in cloud-init.log after clone VM on ESXi platform [rhel-7.9.z])
- Resolves: bz#1871916
  ([Azure][RHEL 7.9] cloud-init Permission denied with the use of mount option noexec [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009600">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
- ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.3" date="1605009601">- ci-network-Fix-type-and-respect-name-when-rendering-vla.patch [bz#1861871]
- Resolves: bz#1861871
  ([rhel7][cloud-init] ifup bond0.504 Error: Connection activation failed: No suitable device found for this connection [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.4" date="1613476800">- ci-DataSourceAzure-update-password-for-defuser-if-exist.patch [bz#1900807]
- Resolves: bz#1900807
  (Update existing user password RHEL7x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 19.4-7.el7_9.5" date="1624968000">- ci-Fix-unit-failure-of-cloud-final.service-if-NetworkMa.patch [bz#1897616]
- Resolves: bz#1897616
  ([rhel-7]cloud-final.service fails if NetworkManager not installed.)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 19.4-7.el7_9.6" date="1643025600">- ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2003231]
- Resolves: bz#2003231
  (anything above 19.2 of cloud init it fails to assign default route and connect to the meta data service)</changelog>
</package>
<package pkgid="44b19294c48c45db9eebefc0d7b58bb7454be885f7a9a9a97cd963074aeed989" name="cockpit-leapp" arch="src">
  <version epoch="0" ver="0.1.5" rel="1.el7_9"/>
  <changelog author="Michal Reznik &lt;mreznik@redhat.com&gt; - 0.1.0-4" date="1572436800">- Add "remediations" file to /var/log/leapp</changelog>
  <changelog author="Michal Reznik &lt;mreznik@redhat.com&gt; - 0.1.0-5" date="1572609600">- Add "back" button to "Remediation Plan"</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.1.1-1" date="1574769600">- Update to 0.1.1
- Fix crash issues due to invalid severity in report
  Resolves: #1776938</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.1.2-1" date="1599048000">- Update to 0.1.2
- Fix showing remediations when leapp is killed
  Resolves: #1873184
- Add support of dialog related report entries
  Resolves: #1873608</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.1.3-1" date="1599652800">- Update to 0.1.3
- Fix running remediation commands
  Resolves: #1877313
- Fix showing report when not logged in as superuser
  Resolves: #1859779</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.1.4-1" date="1600344000">- Update to 0.1.4
- Require superuser in all file/process API calls
  Resolves: #1859779</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.1.5-1" date="1603368000">- Update to 0.1.5
- Fix execution of remediations and error redirect
  Resolves: #1890682</changelog>
</package>
<package pkgid="c0ad332cf56b858c7d7f657b69982afe2dfb28d4a1b714f63bdf6a1920d44c8c" name="cockpit-leapp" arch="src">
  <version epoch="0" ver="0.1.6" rel="2.el7_9"/>
  <changelog author="Michal Reznik &lt;mreznik@redhat.com&gt; - 0.1.0-4" date="1572436800">- Add "remediations" file to /var/log/leapp</changelog>
  <changelog author="Michal Reznik &lt;mreznik@redhat.com&gt; - 0.1.0-5" date="1572609600">- Add "back" button to "Remediation Plan"</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.1.1-1" date="1574769600">- Update to 0.1.1
- Fix crash issues due to invalid severity in report
  Resolves: #1776938</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.1.2-1" date="1599048000">- Update to 0.1.2
- Fix showing remediations when leapp is killed
  Resolves: #1873184
- Add support of dialog related report entries
  Resolves: #1873608</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.1.3-1" date="1599652800">- Update to 0.1.3
- Fix running remediation commands
  Resolves: #1877313
- Fix showing report when not logged in as superuser
  Resolves: #1859779</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.1.4-1" date="1600344000">- Update to 0.1.4
- Require superuser in all file/process API calls
  Resolves: #1859779</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.1.5-1" date="1603368000">- Update to 0.1.5
- Fix execution of remediations and error redirect
  Resolves: #1890682</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.1.6-1" date="1635163200">- Update to 0.1.6
- Fix showing report entries with unknown resource types
  Resolves: #2017115</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.1.6-2" date="1635336000">- Updated dependencies regarding rename of binary packages
  in leapp-repository
  Resolves: #2017115</changelog>
</package>
<package pkgid="dadf1561b213fb4ff8826e2dc22d9f61d4780fb5b9785d7b49cd4caab187093a" name="compat-exiv2-023" arch="src">
  <version epoch="0" ver="0.23" rel="2.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.23-1" date="1528891200">- Spec file based on exiv2 package to provide old libraries before API change
  Resolves: bz#1568618</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.23-2" date="1529323200">- Remove Windows binaries from the tarball
  Resolves: bz#1568618</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.23-3" date="1628769600">- Fix heap-based buffer overflow vulnerability in jp2image.cpp
  Resolves: bz#1990393</changelog>
</package>
<package pkgid="8d488d85a98a6addc87aa8bebd3595b033cb61c271bfe5e16a81afee930aef63" name="compat-exiv2-026" arch="src">
  <version epoch="0" ver="0.26" rel="3.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.26-1" date="1548763200">- Spec file based on exiv2 package to provide old libraries before API change
  Resolves: bz#1668355</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.26-2" date="1582027200">- Fix crash in Pentax camera files
  Resolves: bz#1747857</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.26-3" date="1628683200">- Fix heap-based buffer overflow vulnerability in jp2image.cpp
  Resolves: bz#1990394</changelog>
</package>
<package pkgid="72196470797289993bdde2c3c719adde078e622cc703c55428fd7d2a4ea852cd" name="compat-sap-c++-10" arch="src">
  <version epoch="0" ver="10.2.1" rel="11.el7_9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 10.1.1-1" date="1591272000">- new package</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 10.2.1-1" date="1596024000">- GCC 10.2 release
- disable -flto in %{optflags}, lto bootstrap will be enabled the GCC way
  later
- require MPFR Library version 3.1.0 (or later)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 10.2.1-11" date="1621425600">- update from Fedora gcc 10.2.1-11 (#1933097)
- apply gcc10-SIZE_MAX.patch</changelog>
</package>
<package pkgid="6eef299106db3d425c368aeb2effe2d49ab4bc1fc38819dc516c9de9671e6e00" name="compat-sap-c++-11" arch="src">
  <version epoch="0" ver="11.1.1" rel="6.el7_9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 10.1.1-1" date="1591272000">- new package</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 10.2.1-1" date="1596024000">- GCC 10.2 release
- disable -flto in %{optflags}, lto bootstrap will be enabled the GCC way
  later
- require MPFR Library version 3.1.0 (or later)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 10.2.1-11" date="1621425600">- update from Fedora gcc 10.2.1-11 (#1933097)
- apply gcc10-SIZE_MAX.patch</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 11.1.1-6" date="1626264000">- update to GCC 11 (#1957766)</changelog>
</package>
<package pkgid="180de80ef930410a2a4007fefe151e6e89af9387b2aefde34ada2718102a69b0" name="compat-unixODBC234" arch="src">
  <version epoch="0" ver="2.3.4" rel="2.el7_9"/>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-7" date="1386331200">- Renamed README.fedora to README.dist</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.1-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.1-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-10" date="1393329600">- Added missing man pages
  Resolves: rhbz#948935</changelog>
  <changelog author="Jan Stanek &lt;jstanek@redhat.com&gt; - 2.3.1-11" date="1436961600">- Turn on versioning of cursor library.
  Resolves: rhbz#1194065</changelog>
  <changelog author="Tomas Repik &lt;trepik@redhat.com&gt; - 2.3.1-12" date="1476878400">- fix the libtool-ltdl compatibility
  Resolves: rhbz#1267438</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.3.1-13" date="1478260800">- revert: ltdl bundling</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.1-14" date="1555416000">- fixed insecure buffer copy (#1571530)
- fixed possible buffer overflow (#1571528)</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.4-1" date="1581336000">- rebase to version 2.3.4
  Resolves: #1790655
- SONAME version bumped to 1002</changelog>
  <changelog author="&lt;odubaj@redhat.com&gt; - 2.3.4-2" date="1581336001">- move soname back to *.so.2 (#1875355)
- add *.so.1002 symlinks for backward compatibility (#1844443)</changelog>
</package>
<package pkgid="6bc6ecccac080fc9682db6ab8c048978b7c2eef5cb4396ba008251b080f3bac3" name="control-center" arch="src">
  <version epoch="1" ver="3.28.1" rel="8.el7_9.1"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1557256</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1526558400">- Update to 3.28.1
- Resolves: #1567179</changelog>
  <changelog author="Christian Kellner &lt;ckellner@redhat.com&gt; - 3.28.1-2" date="1528718400">- Include thunderbolt panel
- Resolves: #1567179</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-3" date="1529409600">- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-4" date="1536062400">- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1565179200">- Fix crash in thunderbolt panel
  Resolves: #1672289</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565265600">- Calculate better extents for the configured displays arrangement
  Resolves: #1591643</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1591876800">- Categorize Infiniband devices correctly
  Resolves: #1630154</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.28.1-8" date="1615550400">- Enable Printers panel in all environments
- Resolves: #1559431</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.1-8.1" date="1655899200">- Remove timezone boundaries
  Resolves: #2098262</changelog>
</package>
<package pkgid="85ca554cbacec0ef00ad14d7e2cb26f98448a623a683eb60fb2d8e54fbb5d3b8" name="control-center" arch="src">
  <version epoch="1" ver="3.28.1" rel="8.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128000">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1557256</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1526558400">- Update to 3.28.1
- Resolves: #1567179</changelog>
  <changelog author="Christian Kellner &lt;ckellner@redhat.com&gt; - 3.28.1-2" date="1528718400">- Include thunderbolt panel
- Resolves: #1567179</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-3" date="1529409600">- Remove outdated soft hyphens from Japanese translation
- Resolves: #1519109</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-4" date="1536062400">- Backport two additional upstream patches for thunderbolt panel
- Resolves: #1594880</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1565179200">- Fix crash in thunderbolt panel
  Resolves: #1672289</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565265600">- Calculate better extents for the configured displays arrangement
  Resolves: #1591643</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1591876800">- Categorize Infiniband devices correctly
  Resolves: #1630154</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 3.28.1-8" date="1615550400">- Enable Printers panel in all environments
- Resolves: #1559431</changelog>
</package>
<package pkgid="b7f27d80b7745c20838981dcc20d65b09360aa65362de08aefc9bcf5d70082af" name="copy-jdk-configs" arch="src">
  <version epoch="0" ver="3.3" rel="11.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-1" date="1509710400">- updated to 3.3
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-2" date="1509710401">- added another subdirs for policies files
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-3" date="1524657600">- fixes issue when java.security for openjdk7 was erased
- Resolves: rhbz#1571854</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-10" date="1525089600">- added javaws.policy and blacklist
- Resolves: rhbz#1571854</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-11" date="1538740800">- Fixing deletation ofemtpy dirs via rogue symlink
- Resolves: rhbz#2100617</changelog>
</package>
<package pkgid="8211f19bc63b07e293e0b3c39a6792d46ef71c9218c474ab79febcba105b353c" name="coreutils" arch="src">
  <version epoch="0" ver="8.22" rel="24.el7_9.2"/>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.22-16" date="1448452800">- cp: prevent potential sparse file corruption (#1284906)</changelog>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 8.22-18" date="1467374400">- fix xfs build failure in chrooted environment (#1263341)
- update filesystem lists for stat and tail from latest upstream
  (#1327881, #1280357) 
- disable id/setgid.sh test(missing chroot feature), fix 
  cp-a-selinux test (#1266500,#1266501)
- colorls.sh - change detection of interactive shell for ksh
  compatibility (#1321648)
- fix date --date crash with empty or invalid TZ envvar (#1325786)
- df -l: do not hang on a dead autofs mount point (#1309247)
- sort -h: fix functionality of human readable numeric sort for other
  than first field (#1328360)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-19" date="1505995200">- timeout: fix race possibly terminating wrong process (#1439465)
- ls: allow interruption when reading slow directories (#1421802)
- fold: preserve new-lines in mutlibyte text (#1418505)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-20" date="1511438400">- df: do not stat file systems that do not satisfy the -t/-x args (#1511947)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-21" date="1512388800">- timeout: revert the last fix for a possible race (#1439465)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-22" date="1516795200">- mv -n: do not overwrite the destination (#1526265)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-23" date="1529064000">- update description of the -a/--all option in df.1 man page (#1553212)
- sort -M: fix memory leak when using multibyte locale (#1540059)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24" date="1552651200">- doc: improve description of the --kibibytes option of ls (#1527391)
- doc: fix typo in date example (#1620624)
- stat,tail: sync the list of file systems with coreutils-8.31 (#1659530)
- df: avoid stat() for dummy file systems with -l (#1668137)
- df: prioritize mounts nearer the device root (#1042840)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24.el7_9.1" date="1593432000">- sync: support syncing specified arguments (#1850682)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 8.22-24.el7_9.2" date="1595332800">- sync: fix open fallback bug (#1850682)</changelog>
</package>
<package pkgid="3c01eacfac1311e08289ce10245087b354900bd307418e1b2a574d795480de3c" name="corosync" arch="src">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-5" date="1553169600">- Resolves: rhbz#1376819
- Resolves: rhbz#1634710

- configure: add --with-initconfigdir option (rhbz#1376819)
- merge upstream commit c0d8af0c7b247df16a90850b0edab4f978cb8192 (rhbz#1376819)
- Use RuntimeDirectory instead of tmpfiles.d (rhbz#1376819)
- merge upstream commit fde7fa0c6408709ccdd090aa9064e6a78232498a (rhbz#1376819)
- totemcrypto: Fix importing of the private key (rhbz#1634710)
- merge upstream commit 3f3e6b62719a263cb221c19a06d9a2c570234caa (rhbz#1634710)
- qnetd: Check existence of NSS DB dir before fork (rhbz#1376819)
- merge upstream commit eac28dffdf7f060f41f2b2e95bb0f4c6c033425d (rhbz#1376819)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169601">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
</package>
<package pkgid="55e1ef246d3df76668b13c929590ab76b393968c4eff8e0c1deea14fa67ffe94" name="corosync" arch="src">
  <version epoch="0" ver="2.4.5" rel="7.el7_9.2"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-6" date="1553169600">- Resolves: rhbz#1542703

- Add spausedd subpackage</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-1" date="1564488000">- Resolves: rhbz#1732039
- Resolves: rhbz#1153818
- Resolves: rhbz#1647120

- Rebase to Corosync 2.4.5</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-2" date="1564488001">- Resolves: rhbz#1656492

- totem: Increase ring_id seq after load (rhbz#1656492)
- merge upstream commit 1061804d09565363aba73e369faf310a7d2c4d86 (rhbz#1656492)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-3" date="1565092800">- Resolves: rhbz#1737884
- Resolves: rhbz#1737887

- Do not set exec permission for service file
- Fix CFLAGS definition</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 2.4.5-4" date="1565179200">- Related: rhbz#1737884

- Enhance spausedd makefile</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-5" date="1585051200">- Resolves: rhbz#1679792
- Resolves: rhbz#1780134

- votequorum: Ignore the icmap_get_* return value (rhbz#1780134)
- merge upstream commit 8ad3c6bbb4556332c5a6b7fecdab73310c045b24 (rhbz#1780134)
- votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780134)
- merge upstream commit bfbed8c320b0c0c5d3db48630f3de77e5fd62b75 (rhbz#1780134)
- votequorum: set wfa status only on startup (rhbz#1679792)
- merge upstream commit 6894792d76b1e8932bc822bb040933ae17e1a0c7 (rhbz#1679792)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-6" date="1590667200">- Resolves: rhbz#1835885

- stats: Add basic schedule-miss stats to needle (rhbz#1835885)
- merge upstream commit 274fda334a84253222e01b779349784ec552921b (rhbz#1835885)
- main: Add schedmiss timestamp into message (rhbz#1835885)
- merge upstream commit 3166a87749fa4817d90ed335f3c5843fc38e7304 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7" date="1591358400">- Related: rhbz#1835885

- main: Make schedmiss in cmap and log equal (rhbz#1835885)
- merge upstream commit 44c1c8ea31f981bdd7856d4eb8f4ac49f95a85e3 (rhbz#1835885)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.1" date="1610712000">- Resolves: rhbz#1896311
- Resolves: rhbz#1897087

- spausedd: Fix log_perror (rhbz#1896311)
- spausedd: Add ability to move process into root cgroup (rhbz#1897087)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.5-7.2" date="1635163200">- Resolves: rhbz#2001969

- totem: Add cancel_hold_on_retransmit config option (rhbz#2001969)</changelog>
</package>
<package pkgid="ca403902861b8a9f434b6f66b955da5c14696493b060b359a5e215276813ffb0" name="crash" arch="src">
  <version epoch="0" ver="7.2.3" rel="11.el7_9.1"/>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-3" date="1527854400">- Rebase to github commits a6cd8408 to da49e201 
  Resolves: rhbz#1559460</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-4" date="1527854401">- Fix bpf.c covscan issues
  Resolves: rhbz#1559758</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-5" date="1528718400">- Rebase to github commits b9d76838 to c79a11fa
  Resolves: rhbz#1559460
- Fix ppc64/ppc6le stacksize calculation
  Resolves: rhbz#1589685</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-6" date="1530878400">- Fix for RHEL7 kernel's eBPF support that uses old IDR facility
  Resolves: rhbz#1559758</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-7" date="1536840000">- Support ppc64 increased VA range
- Fix ppc64 "bt" command failure reporting invalid NIP value
  Resolves: rhbz#1617936</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-8" date="1537185600">- Fix ppc64 "bt" command failure reporting invalid NIP value for a user-space task. 
  Resolves: rhbz#1617936</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-9" date="1546430400">- Alternate list loop detection option
  Resolves: rhbz#1595389
- Readline library tab completion plugin
  Resolves: rhbz#1656165</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-10" date="1546948800">- Restrict command line to 1500 bytes
  Resolves: rhbz#1663792</changelog>
  <changelog author="Dave Anderson &lt;anderson@redhat.com&gt; - 7.2.3-11" date="1554033600">- Fix to prevent display of invalid "timer" command entries
  Resolves: rhbz#1818084</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; - 7.2.3-11.1" date="1600862400">- crash/sadump, kaslr: fix failure of calculating kaslr_offset due to an sadump format restriction
  Resolves: rhbz#1854016</changelog>
</package>
<package pkgid="8c05dd735de664f08f9020d128a37ab779c82f7113051d8103b76ff5d1bf9da0" name="cronie" arch="src">
  <version epoch="0" ver="1.4.11" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-15" date="1456228800">- crontab: use temporary filename properly ignored by crond</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
</package>
<package pkgid="b82ced49c0366ec860b94faf9f04cfea90dcde7708613f73ef95d4a5369a0ad6" name="cronie" arch="src">
  <version epoch="0" ver="1.4.11" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-16" date="1488888000">- disable mail from anacron with empty MAILTO
- crontab: do not block access with PAM when running as root
- improve the crontab man page
- do not hardcode system_u selinux user but use the user from
  the current context</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-17" date="1490788800">- make anacron not to contradict itself in syslog
  (job output does not have to be necessarily mailed)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-18" date="1505476800">- fix regression - spurious PAM log message from crontab (#1479064)
- allow empty variables in crontabs (#1439217)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 1.4.11-19" date="1508155200">- fix URL and source URL of the package (#1501726)</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-20" date="1540296000">- Fix race condition when crontab is modified the same second
  before and after reading the crontab
- Resolves: rhbz#1638691</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-21" date="1543492800">- Backport upstream patch to fix -P behavior
- Resolves: rhbz#1536111</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-22" date="1543924800">- Backport upstream patch to fix cron failing on
  smart card authentication
- Resolves: rhbz#1650314</changelog>
  <changelog author="Marcel Plch &lt;mplch@redhat.com&gt; - 1.4.11-23" date="1550059200">- Make cronie restart on failure
- Resolves: rhbz#1651730</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1.4.11-24" date="1638187200">- Limit memory allocated for file descriptors
  Backports https://github.com/cronie-crond/cronie/commit/584911514ce6aa2f16e1d79431bac816ea62cb2c
  Resolves: rhbz#2026289</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.4.11-25" date="1678708800">- Set 'missingok' for /etc/cron.deny to not recreate it on update
- Resolves: rhbz#2059479</changelog>
</package>
<package pkgid="a191a1a8a229015ba250eddbbe12d0e26f1ec38f00b67a91c366165dd212d13b" name="cups" arch="src">
  <version epoch="1" ver="1.6.3" rel="52.el7_9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1:1.6.3-43" date="1565265600">- 1687571 - cupsd doesn't clean tmp files if client conn is terminated abnormally</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-44" date="1580731200">- 1774460 - CVE-2019-8696 cups: stack-buffer-overflow in libcups's asn1_get_packed function [rhel-7]
- 1774461 - CVE-2019-8675 cups: stack-buffer-overflow in libcups's asn1_get_type function [rhel-7]
- 1753809 - Settings in ~/.cups/client.conf aren't used</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-45" date="1580990400">- fixing covscan issue from 1774460</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-46" date="1581422400">- 1715907 - CUPS- client: cupsGetPPD3() function tries to load PPD from IPP printer and not from the CUPS queue</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-47" date="1581681600">- 1672212 - cupsd eats a lot of memory when lots of queue with extensive PPDs are created</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-48" date="1581681601">- fixing covscan issue from 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-49" date="1581681602">- more covscan issues raised from the fix 1672212</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-50" date="1585137600">- 1813413 - [RHEL 7.7] segfault in cupsdSaveJob() caused by no space in /var</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1:1.6.3-51" date="1587384000">- 1823758 - CVE-2017-18190 cups: DNS rebinding attacks via incorrect whitelist [rhel-7]</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 1:1.6.3-52" date="1692100800">- CVE-2023-32360 cups: Information leak through Cups-Get-Document operation</changelog>
</package>
<package pkgid="116ed21f96b79e46ee38f0a3fb8982fe026aee7949a08589783af874ff4adbb7" name="cups-filters" arch="src">
  <version epoch="0" ver="1.0.35" rel="29.el7_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 1.0.35-21" date="1436443200">- Fix heap-based buffer overflow in texttopdf filter (bug #1241242,
  CVE-2015-3258, CVE-2015-3279).</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-22" date="1488456000">- 1427690 - /usr/lib/cups/filter/pstopdf: line 17: which: command not found</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-23" date="1550664000">- 1485502 - Rebase cups-browsed to latest version in upstream cups-filters</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-24" date="1552910400">- fixing covscan issues, backported from upstream - 1485502</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-25" date="1555502400">- 1700333 - [abrt] [faf] cups-filters: raise(): /usr/sbin/cups-browsed killed by 6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-26" date="1558440000">- 1508018 - man pages: wrong links in man cups-browsed</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-27" date="1574683200">- 1775776 - Updated cups-browsed in RHEL 7.7 leaks sockets</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1584964800">- 1816109 - Queues are not cleaned up after stopping cups-browsed
- 1811190 - cups-browsed leaks memory</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-28" date="1585051200">- 1812635 - RHEL 7.7. cups-browsed segfaults on shutdown</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 1.0.35-29" date="1652788800">- 1894301 - cups-browsed segfaults when accessing freed master queue in print queue cluster</changelog>
</package>
<package pkgid="7eab97dbeb4c5546d141f497bc5da559b527df9e65ecacc685a90dd8a7b70f3d" name="curl" arch="src">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-51" date="1533729600">- require a new enough version of nss-pem to avoid regression in yum (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
</package>
<package pkgid="f177c706fa8c16f5b3f99301f98387582b0ee5fe38c5c0bdf4189b115ea14e76" name="curl" arch="src">
  <version epoch="0" ver="7.29.0" rel="59.el7_9.2"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-52" date="1551441600">- prevent curl --rate-limit from hanging on file URLs (#1281969)
- fix NTLM password overflow via integer overflow (CVE-2018-14618)
- fix bad arithmetic when outputting warnings to stderr (CVE-2018-16842)
- backport options to force TLS 1.3 in curl and libcurl (#1672639)
- prevent curl --rate-limit from crashing on https URLs (#1683292)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-53" date="1558958400">- backport the --tls-max option of curl and TLS 1.3 ciphers (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-54" date="1559563200">- make `curl --tlsv1` backward compatible (#1672639)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-55" date="1565092800">- fix TFTP receive buffer overflow (CVE-2019-5436)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-56" date="1569931200">- fix auth failure with duplicated WWW-Authenticate header (#1754736)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-57" date="1574856000">- allow curl to POST from a char device (#1769307)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-58" date="1584964800">- fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59" date="1591099200">- http: free protocol-specific struct in setup_connection callback (#1836773)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 7.29.0-59.el7_9.1" date="1595937600">- avoid overwriting a local file with -J (CVE-2020-8177)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 7.29.0-59.el7_9.2" date="1699358400">- fix HTTP proxy deny use after free (CVE-2022-43552)
- rebuild certs with 2048-bit RSA keys</changelog>
</package>
<package pkgid="7a8eaf349fb52ee9c9af59834d6ea133ab918eb41b6ba193ca4a750dfc55f37f" name="cyrus-sasl" arch="src">
  <version epoch="0" ver="2.1.26" rel="24.el7_9"/>
  <changelog author="Petr Lautrbach &lt;plautrba@redhat.com&gt; 2.1.26-15" date="1389700800">- compile cyrus-sasl with -O3 on ppc64 (#1051063)</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.1.26-16" date="1389787200">- Rebuild for mariadb-libs
  Related: #1045013</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.26-17" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-18" date="1432123200">- Revert updated GSSAPI flags as in RFC 4752 to restore backward compatibility (#1154566)
- Add and document ability to run saslauth as non-root user (#1188065)
- Support AIX SASL GSSAPI (#1174322)
- Update client library to be thread safe (#1147659)
- Fix problem, that parsing short prefix matches the whole mechanism name (#1089267)
- Don't use unnecessary quotes around user description (#1082564)
- Fix confusing message when config file has typo (#1022479)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-19.2" date="1437048000">- Revert tmpfiles.d and use new systemd feature RuntimeDirectory (#1188065)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; 2.1.26-20" date="1449230400">- GSSAPI: Use per-connection mutex where possible (#1263017)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-21" date="1488801600">- support proper SASL GSS-SPNEGO (#1421663)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-22" date="1505995200">- Allow cyrus sasl to get the ssf from gssapi (#1431586)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.1.26-23" date="1511352000">- Avoid undefined symbols on s390x (#1516193)</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 2.1.26-24" date="1645099200">- Fix for CVE-2022-24407
- Resolves: rhbz#2055842</changelog>
</package>
<package pkgid="19405e856f39e70a5e892e29d3a4adef2a1c6b6ed809f1c89951e978f74e8e48" name="device-mapper-multipath" arch="src">
  <version epoch="0" ver="0.4.9" rel="134.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-125" date="1550059200">- Modify 0250-RHBZ-1610867-rescan-change.patch
  * Fix memory Leak
- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix NULL dereference
- Refresh 0252-RHBZ-1623595-cmd-error-status.patch
- Resolves: bz #1610867, #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059201">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
</package>
<package pkgid="cf20f21cfc5d5fdd7479f0e7575db8c0d579b0ddb422b885b78cbc4207f61734" name="device-mapper-multipath" arch="src">
  <version epoch="0" ver="0.4.9" rel="135.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-126" date="1550059200">- Modify 0255-RHBZ-1638651-marginal-path.patch
  * Fix memory leak
- Resolves: bz #1638651</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
</package>
<package pkgid="5eb5eb7eb5c3b6e8255e64a52acc4a59dd70d18e6dd305149d31d1ae11e0374b" name="device-mapper-multipath" arch="src">
  <version epoch="0" ver="0.4.9" rel="136.el7_9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-127" date="1552564800">- Add 0256-RHBZ-1672175-retry-no-fd-paths.patch
  * retry adding paths if they couldn't be opened initially
- Add 0257-RHBZ-1679556-dont-check-dm-devices.patch
  * don't check if dm devices are multipath paths
- Add 0258-RHBZ-1634183-ANA-prioritizer.patch
  * Add NVMe ANA path prioritizer
- Resolves: bz #1634183, #1672175, #1679556</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-128" date="1565611200">- Modify 0258-RHBZ-1634183-ANA-prioritizer.patch
  * minor change
- Add 0259-RHBZ-1701604-fix-nr-active.patch
  * recalculate the number of active paths whenever a path is checked
- Add 0260-RHBZ-1634183-prio-fixes.patch
- Add 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * ignore blacklisted paths in mpathpersist
- Add 0262-RHBZ-1699486-reload-with-failed-paths.patch
  * allow forced reloads even if there are no reusable paths
- Add 0263-RHBZ-1686708-nvme-hcil.patch
  * make nvme ids work like in upstream
- Add 0264-RHBZ-1699441-de-series-config.patch
- Resolves: bz #1686708, #1699441, #1699486, #1701604, #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-129" date="1567080000">- Add 0265-RHBZ-1721855-mpathpersist-speedup.patch
  * only grab path information from necessary devices, and allow batch files.
- Add 0266-RHBZ-1696817-fix-emc-checker.patch
  * fix detection of inactive snapshots
- Add 0267-RHBZ-1661156-powermax-config.patch
- Remove 0261-RHBZ-1714506-skip-blacklisted-paths.patch
  * This fix is superseded by 0265-RHBZ-1721855-mpathpersist-speedup.patch
- Resolves: bz #1661156, #1696817, #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-130" date="1567166400">- Add 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * Fix issues in the mpathpersist speedup code
- Resolves: bz #1721855</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-131" date="1575979200">- Modify 0268-RHBZ-1721855-mpathpersist-fixes.patch
  * The fix for 1721855 broke 1714506.
- Resolves: bz #1714506</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-132" date="1585569600">- Add 0269-RHBZ-1804420-remove-kpartx-limit.patch
  * Remove the 256 device limit, when searching loop devices with kpartx
- Resolves: bz #1804420</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-133" date="1585569601">- Add 0270-RHBZ-1775481-segfault-fix.patch
  * Fix segfault related to missing dm device tables
- 0271-RHBZ-1806197-mpathconf-typo.patch
- Resolves: bz #1775481, #1806197</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-134" date="1600084800">- Add 0272-RHBZ-1855901-lenovo-de.patch
- Resolves: bz #1855901</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-135" date="1627646400">- Add 0273-RHBZ-1988462-fix-disable-changed-wwids-segfault.patch
- Resolves: bz #1988462</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-136" date="1665662400">- Add 0274-UP-no-duplicate-command-keys.patch
- Resolves: bz #2134905</changelog>
</package>
<package pkgid="4e40bd404f712826928754502bdba9facda0c6aa26323d79898fd34af1f14c3f" name="device-mapper-persistent-data" arch="src">
  <version epoch="0" ver="0.8.5" rel="3.el7_9.2"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-1" date="1507291200">- Update to latest bugfix and documentation update release.
- *_restore tools wipe superblock as a last resort.
- Add thin_check --override-mapping-root.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-2" date="1507636800">- Rebuilding with updated source tarball.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.7.3-3" date="1510660800">- Fix version 2 metadata corruption in cache_restore.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.1-1" date="1556971200">- Update to latest upstream release including various bug fixes.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.2-1" date="1558958400">- Fix tools requiring additional --repair option.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-1" date="1560168000">- Additional fixes for thin_dump and thin_repair.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-2" date="1574164800">- Remove obsolete pool-inactive option from thin_trim man page.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3" date="1587384000">- Check input file exists earlier.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3.el7_9.1" date="1600257600">- Underpopulated nodes are considered non fatal error by thin_check.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 0.8.5-3.el7_9.2" date="1600689600">- Rebuild for Z stream.</changelog>
</package>
<package pkgid="364f85ad7dfb8caa85edf83711c39da0ea1f968be2bb22b49c506d8a8c06b79e" name="dhcp" arch="src">
  <version epoch="12" ver="4.2.5" rel="83.el7_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 12:4.2.5-74" date="1550145600">- Use bind-export-libs package instead of bind99
- Use isc-config.sh to configure bind libs
- Change requirement to bind-export-devel
- Compile with recent bind includes, that does not include isc/util.h</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-75" date="1551700800">- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-76" date="1556798400">- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-77" date="1558440000">- Resolves: #1712414 - Reset signal handlers set by isclib</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-78" date="1565784000">- Detect time shifts to prevent ip address expiration (#1093803)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-79" date="1569931200">- Resolves:  #1756850 - Close FD in noreplay mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-80" date="1579176000">- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-81" date="1579694400">- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83" date="1581336000">- Revert fix for 1668696</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83.1" date="1622116800">- Fix for CVE-2021-25217</changelog>
</package>
<package pkgid="e7a7cc7339466884471df615819059cb86cbba03d40b77565f958d7604898582" name="dhcp" arch="src">
  <version epoch="12" ver="4.2.5" rel="83.el7_9.2"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-75" date="1551700800">- Resolves: #1672308 - Do not restart dhcp on NetworkManagers up events</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-76" date="1556798400">- Resolves: #1704675 - Fix crash of dhcpd(6) triggered by bind rebase</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-77" date="1558440000">- Resolves: #1712414 - Reset signal handlers set by isclib</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-78" date="1565784000">- Detect time shifts to prevent ip address expiration (#1093803)</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-79" date="1569931200">- Resolves:  #1756850 - Close FD in noreplay mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-80" date="1579176000">- Resolves: #1697637 - Resize ldap buffers to truncate bigger objects</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-81" date="1579694400">- Resolves: #1668696 - Update /etc/resolv.conf in stateless mode</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83" date="1581336000">- Revert fix for 1668696</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-83.1" date="1622116800">- Fix for CVE-2021-25217</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 12:4.2.5-83.2" date="1716379200">- Rebuild because of bind ABI changes related to CVE-2023-50387</changelog>
</package>
<package pkgid="782c64c48df1cef7e844aa55dcc6924e02f08aa23e21b1b9cb35b29b135c0662" name="diffutils" arch="src">
  <version epoch="0" ver="3.3" rel="6.el7_9"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-10" date="1348056000">- Fixed license as current source says GPLv3+.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-11" date="1351252800">- Ported i18n patch and reinstated it (bug #870460).</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.2-12" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.2-13" date="1361534400">- Fixed i18n handling of 'diff -E' (bug #914666).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.3-1" date="1364299200">- 3.3 (bug #927560).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 3.3-2" date="1382529600">- Fixed multibyte handling logic for diff -Z (bug #1022417).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.3-5" date="1542801600">- Resolves: #1611281, diff -y produces garbage</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.3-6" date="1676462400">- Resolves: #2152980, regression</changelog>
</package>
<package pkgid="ebdbd1a5ee3ab06c329701d9fe190b0518402b2f2848de1a9c1375280cf54f34" name="dmidecode" arch="src">
  <version epoch="1" ver="3.2" rel="5.el7_9.1"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-2" date="1467201600">- Unmask LRDIMM in memmory type detail
- Resolves: #1321342</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-3" date="1478606400">- Hide irrelevant fixup message
- Resolves: #1384195</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-4" date="1488283200">- Sync with upstream
- Resolves: #1385884</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 1:3.0-5" date="1493812800">- Update compiler flags for hardened builds
- Resolves: #1420763</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.1-1" date="1524744000">- Sync with upstream
- Resolves: rhbz#1568227</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-1" date="1541505600">- Sync with upstream 3.2
- Resolves: rhbz#1628992</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-3" date="1556280000">- Add "Logical non-volatile device" to the memory device types
- Resolves: rhbz#1664921</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-4" date="1584532800">- Fix System Slot Information for PCIe SSD
- Resolves: rhbz#1793900
- Sync with upstream(commit:62bce59fed1)
- Resolves: rhbz#1767323</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-5" date="1585569600">- Revert this patch("Use larger units for memory device and BIOS size")
- Resolves: rhbz#1767323</changelog>
  <changelog author="Lianbo Jiang &lt;lijiang@redhat.com&gt; - 1:3.2-5.1" date="1610452800">- Fix the "OUT OF SPEC" error for empty NVMe and DIMM slots
- Resolves: rhbz#1858345</changelog>
</package>
<package pkgid="5d755a59e488441d91fbf96455f4f0d6dd9ce6152f68cacbeedca6bf770e0376" name="dnf" arch="src">
  <version epoch="0" ver="4.0.9.2" rel="2.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.5-12" date="1524052800">- Fix defaults loading.</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 2.7.5-13" date="1527249600">- Rebase to dnf from dnf-2-modularity-6 release.</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 2.7.5-14" date="1527249601">- Fix patch applying.</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 2.7.5-15" date="1527508800">- Do not require libdnf</changelog>
  <changelog author="Martin Hatina &lt;mhatina@redhat.com&gt; - 2.7.5-16" date="1527595200">- Apply util-Correctly-source-errno.EEXIST patch</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 2.7.5-17" date="1532347200">- Rename yum4 subpackage to nextgen-yum4
- Correct Source0 URL</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 2.7.5-18" date="1537790400">- Exclude system and commandline pkg from filtering (RhBug:1630226)</changelog>
  <changelog author="Jaroslav Mracek &lt;jmracek@redhat.com&gt; - 2.7.5-19" date="1541678400">- Backport patches for RHBZ#1643129 from upstream dnf-2-modularity</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9.2-1" date="1546948800">- Update to 4.0.9.2</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9.2-2" date="1614254400">- Add conflict with librepo &lt; 1.8.1 to enforce librepo upgrade (RhBug:1932228)</changelog>
</package>
<package pkgid="7346e4ce725fd8a97bdb93a13b2461d029644a424c7fb2a0e75daacb6fe7235d" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.76" rel="16.el7_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-8" date="1552910400">- Stop using privileged port for outbound queries (#1614331)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
</package>
<package pkgid="5e020533b8db9a122320c6b8e0c770dbc5675323a52f20dbbb9ac692b989c423" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.76" rel="17.el7_9.1"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.79-9" date="1553601600">- Fix passing of dnssec enabled queries (#1638703)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-10" date="1562155200">- Fix TCP queries after interface recreation (#1721668)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.1" date="1613044800">- Fix occasional failures in netlink on many interfaces (#1887649)</changelog>
</package>
<package pkgid="4ffe2dacf0fddac32054b008fd00fc6df42a5444ba7e6219f823ca372035652d" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.76" rel="17.el7_9.3"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-11" date="1569844800">- Send dhcp_release even for addresses not on local network (#1752569)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-12" date="1583150400">- Fix memory leak in create_helper (#1795369)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-13" date="1583236800">- Do not ignore DHCPv6 relay messages (#1757247)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-14" date="1586433600">- Stop treating SERVFAIL as successful response (#1815080)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-15" date="1587470400">- Forward non-recursive queries to upstream, but serve local names (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16" date="1593691200">- Fix strict-mode retries on REFUSED (#1755610)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-16.1" date="1606478400">- Accept responses only on correct sockets (CVE-2020-25684)
- Use strong verification on queries (CVE-2020-25685)
- Handle multiple identical DNS queries better (CVE-2020-25686)
- Link against nettle for sha256 hash implementation</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.1" date="1613044800">- Fix occasional failures in netlink on many interfaces (#1887649)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.2" date="1614600000">- Correct two regressions introduced by CVE fixes (#1923913)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 2.76-17.3" date="1614945600">- Accept replies from bound sockets again (#1923913)</changelog>
</package>
<package pkgid="7367b8f462ff21987e940805f8d5675ee782cdf65e87551e5af430393ccb59b3" name="docker" arch="src">
  <version epoch="2" ver="1.13.1" rel="203.git0be3e21.el7_9"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-157.git64e9980" date="1581422400">- fix CVE-2020-1702 (#1792796)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-158.git64e9980" date="1581681600">- add missing patch for #1718441</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-159.git64e9980" date="1582286400">- fix CVE-2020-8945 (#1784838)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-160.git64e9980" date="1583150400">- fix "dockerd leaks SELinux MCS labels" (#1734482)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-161.git64e9980" date="1583236800">- make failure message for CVE-2020-1702 more obvious (#1804024)
- drop patch for #1734482 as it breaks compilation</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-162.git0be3e21" date="1591790400">- update docker to 0be3e21: fixes "dockerd leaks SELinux MCS labels"
- Resolves: #1734482</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-200.git0be3e21" date="1592827200">- rebuilt</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-201.git0be3e21" date="1600776000">- fix "Race condition in kubelet cgroup destroy process"
- Resolves: #1766665</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-202.git0be3e21" date="1601380800">- fix "runc run: fix panic on failed init start"
- Resolves: #1879425</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-203.git0be3e21" date="1603800000">- do not enable CollectMode support yet because it is not still present in
  7.6-ALT
- Related: #1766665</changelog>
</package>
<package pkgid="c9a89a943908078b13c6774eb3db7f5d3c9beec0dd2f79917f01d9d682aa9a95" name="docker" arch="src">
  <version epoch="2" ver="1.13.1" rel="204.git0be3e21.el7_9"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-158.git64e9980" date="1581681600">- add missing patch for #1718441</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-159.git64e9980" date="1582286400">- fix CVE-2020-8945 (#1784838)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-160.git64e9980" date="1583150400">- fix "dockerd leaks SELinux MCS labels" (#1734482)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-161.git64e9980" date="1583236800">- make failure message for CVE-2020-1702 more obvious (#1804024)
- drop patch for #1734482 as it breaks compilation</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-162.git0be3e21" date="1591790400">- update docker to 0be3e21: fixes "dockerd leaks SELinux MCS labels"
- Resolves: #1734482</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-200.git0be3e21" date="1592827200">- rebuilt</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-201.git0be3e21" date="1600776000">- fix "Race condition in kubelet cgroup destroy process"
- Resolves: #1766665</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-202.git0be3e21" date="1601380800">- fix "runc run: fix panic on failed init start"
- Resolves: #1879425</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-203.git0be3e21" date="1603800000">- do not enable CollectMode support yet because it is not still present in
  7.6-ALT
- Related: #1766665</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-204.git0be3e21" date="1613131200">- fix CollectMode again
- Related: #1787148</changelog>
</package>
<package pkgid="1f7fd0fa358048c3ca25050caf1faef7bba076749e5054f64586090647bf013e" name="docker" arch="src">
  <version epoch="2" ver="1.13.1" rel="205.git7d71120.el7_9"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-159.git64e9980" date="1582286400">- fix CVE-2020-8945 (#1784838)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-160.git64e9980" date="1583150400">- fix "dockerd leaks SELinux MCS labels" (#1734482)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-161.git64e9980" date="1583236800">- make failure message for CVE-2020-1702 more obvious (#1804024)
- drop patch for #1734482 as it breaks compilation</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-162.git0be3e21" date="1591790400">- update docker to 0be3e21: fixes "dockerd leaks SELinux MCS labels"
- Resolves: #1734482</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-200.git0be3e21" date="1592827200">- rebuilt</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-201.git0be3e21" date="1600776000">- fix "Race condition in kubelet cgroup destroy process"
- Resolves: #1766665</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-202.git0be3e21" date="1601380800">- fix "runc run: fix panic on failed init start"
- Resolves: #1879425</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-203.git0be3e21" date="1603800000">- do not enable CollectMode support yet because it is not still present in
  7.6-ALT
- Related: #1766665</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-204.git0be3e21" date="1613131200">- fix CollectMode again
- Related: #1787148</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-205.git7d71120" date="1617192000">- fix mounting volume with incorrect permission
- fix dockerd leaking SELinux MCS labels
- Resolves: #1734482
- Resolves: #1896883</changelog>
</package>
<package pkgid="e4def95f7959e91d6b7e92cc3c293ff1a1af61019359ab03f45957e171c7027d" name="docker" arch="src">
  <version epoch="2" ver="1.13.1" rel="206.git7d71120.el7_9"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-160.git64e9980" date="1583150400">- fix "dockerd leaks SELinux MCS labels" (#1734482)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-161.git64e9980" date="1583236800">- make failure message for CVE-2020-1702 more obvious (#1804024)
- drop patch for #1734482 as it breaks compilation</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-162.git0be3e21" date="1591790400">- update docker to 0be3e21: fixes "dockerd leaks SELinux MCS labels"
- Resolves: #1734482</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-200.git0be3e21" date="1592827200">- rebuilt</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-201.git0be3e21" date="1600776000">- fix "Race condition in kubelet cgroup destroy process"
- Resolves: #1766665</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-202.git0be3e21" date="1601380800">- fix "runc run: fix panic on failed init start"
- Resolves: #1879425</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-203.git0be3e21" date="1603800000">- do not enable CollectMode support yet because it is not still present in
  7.6-ALT
- Related: #1766665</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-204.git0be3e21" date="1613131200">- fix CollectMode again
- Related: #1787148</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-205.git7d71120" date="1617192000">- fix mounting volume with incorrect permission
- fix dockerd leaking SELinux MCS labels
- Resolves: #1734482
- Resolves: #1896883</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-206.git7d71120" date="1621339200">- fix CVE-2021-30465
- Related: #1959475</changelog>
</package>
<package pkgid="379110e8ec2b910d0f2a267b05ec1f9899e5a4cc149bdd6d0a3be52a279d658d" name="docker" arch="src">
  <version epoch="2" ver="1.13.1" rel="208.git7d71120.el7_9"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-162.git0be3e21" date="1591790400">- update docker to 0be3e21: fixes "dockerd leaks SELinux MCS labels"
- Resolves: #1734482</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-200.git0be3e21" date="1592827200">- rebuilt</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-201.git0be3e21" date="1600776000">- fix "Race condition in kubelet cgroup destroy process"
- Resolves: #1766665</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-202.git0be3e21" date="1601380800">- fix "runc run: fix panic on failed init start"
- Resolves: #1879425</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-203.git0be3e21" date="1603800000">- do not enable CollectMode support yet because it is not still present in
  7.6-ALT
- Related: #1766665</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-204.git0be3e21" date="1613131200">- fix CollectMode again
- Related: #1787148</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-205.git7d71120" date="1617192000">- fix mounting volume with incorrect permission
- fix dockerd leaking SELinux MCS labels
- Resolves: #1734482
- Resolves: #1896883</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-206.git7d71120" date="1621339200">- fix CVE-2021-30465
- Related: #1959475</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-207.git7d71120" date="1622030400">- apply memory leak fix from Kir Kolyshkin
- Resolves: #1951896</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-208.git7d71120" date="1622808000">- propagate mounts to the host - fix regression introduced by fix of CVE-2021-30465
- Resolves: #1966968</changelog>
</package>
<package pkgid="cf1ab13fb6cdc4eaa19681431279e347601e481c34aba7c8cb69421abac43e92" name="docker" arch="src">
  <version epoch="2" ver="1.13.1" rel="209.git7d71120.el7_9"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-200.git0be3e21" date="1592827200">- rebuilt</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-201.git0be3e21" date="1600776000">- fix "Race condition in kubelet cgroup destroy process"
- Resolves: #1766665</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-202.git0be3e21" date="1601380800">- fix "runc run: fix panic on failed init start"
- Resolves: #1879425</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-203.git0be3e21" date="1603800000">- do not enable CollectMode support yet because it is not still present in
  7.6-ALT
- Related: #1766665</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-204.git0be3e21" date="1613131200">- fix CollectMode again
- Related: #1787148</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-205.git7d71120" date="1617192000">- fix mounting volume with incorrect permission
- fix dockerd leaking SELinux MCS labels
- Resolves: #1734482
- Resolves: #1896883</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-206.git7d71120" date="1621339200">- fix CVE-2021-30465
- Related: #1959475</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-207.git7d71120" date="1622030400">- apply memory leak fix from Kir Kolyshkin
- Resolves: #1951896</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-208.git7d71120" date="1622808000">- propagate mounts to the host - fix regression introduced by fix of CVE-2021-30465
- Resolves: #1966968</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-209.git7d71120" date="1633089600">- update to runc-8891bca22c049cd2dcf13ba2438c0bac8d7f3343
- update to containerd-46b69ea4c3d2d965e2116ef47e20e5584a3c2741
- apply https://github.com/projectatomic/runc/pull/56
- drop applied patches
- Related: #2000782</changelog>
</package>
<package pkgid="a733cb8cf7110f0446beadd666a12c5485115a4f7d1095213af2fdcb9ccba088" name="docker" arch="src">
  <version epoch="2" ver="1.13.1" rel="210.git7d71120.el7_9"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-201.git0be3e21" date="1600776000">- fix "Race condition in kubelet cgroup destroy process"
- Resolves: #1766665</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-202.git0be3e21" date="1601380800">- fix "runc run: fix panic on failed init start"
- Resolves: #1879425</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-203.git0be3e21" date="1603800000">- do not enable CollectMode support yet because it is not still present in
  7.6-ALT
- Related: #1766665</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-204.git0be3e21" date="1613131200">- fix CollectMode again
- Related: #1787148</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-205.git7d71120" date="1617192000">- fix mounting volume with incorrect permission
- fix dockerd leaking SELinux MCS labels
- Resolves: #1734482
- Resolves: #1896883</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-206.git7d71120" date="1621339200">- fix CVE-2021-30465
- Related: #1959475</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-207.git7d71120" date="1622030400">- apply memory leak fix from Kir Kolyshkin
- Resolves: #1951896</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-208.git7d71120" date="1622808000">- propagate mounts to the host - fix regression introduced by fix of CVE-2021-30465
- Resolves: #1966968</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-209.git7d71120" date="1633089600">- update to runc-8891bca22c049cd2dcf13ba2438c0bac8d7f3343
- update to containerd-46b69ea4c3d2d965e2116ef47e20e5584a3c2741
- apply https://github.com/projectatomic/runc/pull/56
- drop applied patches
- Related: #2000782</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-210.git7d71120" date="1709208000">- update runc to latest content of docker-1.31.1-rhel branch
- drop upstreamed docker-2000782.patch</changelog>
</package>
<package pkgid="6aa05f136398915e4c35becb436cbde892e7bd4989560e0d9405bfa95ff1c9dd" name="dpdk" arch="src">
  <version epoch="0" ver="18.11.8" rel="2.el7_9"/>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 17.11-15" date="1541419200">- Re-align with DPDK patches inside OVS FDP 18.11 (#1646598)</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 18.11-1" date="1543320000">- Add conditionals to build on RHEL8 and Fedora
- Updated to DPDK 18.11 (#1651337):
  - Updated configs
  - Added libmnl-devel BuildRequires for Mellanox</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 18.11-2" date="1543320001">- Fix python scripts hashbang
- Remove meson.build from dpdk-tools</changelog>
  <changelog author="Maxime Coquelin &lt;maxime.coquelin@redhat.com&gt; - 18.11.3" date="1549454400">- Backport NETVSC pmd fixes (#1662292)</changelog>
  <changelog author="Jens Freimann &lt;jfreiman@redhat.com&gt; - 18.11-4" date="1550491200">- Set correct offload flags for virtio and allow jumbo frames (#1669355)</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 18.11.2-1" date="1561636800">- Updated to DPDK 18.11.2 (#1713704)</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 18.11.5-1" date="1576843200">- Updated to DPDK 18.11.5 that includes the fixes for CVE-2019-14818 (#1777135)</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 18.11.7-1" date="1587124800">- Updated to DPDK 18.11.7 (#1825276)
- Align patches with DPDK included in OVS 2.11</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 18.11.8-1" date="1589976000">- Updated to DPDK 18.11.8 (#1836829, #1837025)</changelog>
  <changelog author="Timothy Redaelli &lt;tredaelli@redhat.com&gt; - 18.11.8-2" date="1666785600">- Backport fixes for CVE-2022-2132 (#2107166)</changelog>
</package>
<package pkgid="ea795b0c3635b6cc7c6da948d95ba29fcdfddfd5f090e200c49cd481855f47bd" name="emacs" arch="src">
  <version epoch="1" ver="24.3" rel="23.el7_9.1"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-15" date="1442318400">- Updated texts in patch and SPEC file
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-16" date="1442577600">- emacs on ppc64le fails to build from source when RELRO is enabled
- Resolves: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-17" date="1444219200">- emacs on ppc64le fails to build from source when RELRO is enabled
- Related: #1223033</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1:24.3-18" date="1444219201">- Fix for sbit on emacs binary
- Related: #1223033</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-19" date="1483704000">- fix build failure on ppc64 (#1336711)
- fix emacs crashes (#1308518)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-20" date="1505217600">- fix unsafe enriched mode translations (#1490451)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-21" date="1528372800">- fix libjpeg detection fails with gcc7 (#1487557)
- fix Emacs GUI Toolbar icons missing (#1477745)
- fix hardening: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 1:24.3-22" date="1536667200">- refix: TLS certificate warnings should be hard errors (#1403643)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1:24.3-23" date="1572609600">- Resolves: #1765208 rebuild against new IM</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:24.3-23.1" date="1680868800">- Fix htmlfontify.el command injection vulnerability (#2175177)</changelog>
</package>
<package pkgid="bb096b052c120090d55d6f365d5d61a6220b92341ef1332c40a15fe795435279" name="etcd" arch="src">
  <version epoch="0" ver="3.2.32" rel="1.el7_9"/>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.15-2" date="1517918400">- Rebuild for 7.5.0
  resolves: #1542526</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.18-1" date="1523966400">- Update to 3.2.18
  resolves: #1568389</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.21-1" date="1528113600">- Update to 3.2.21
  resolves: #1585787</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.22-1" date="1528718400">- Update to 3.2.22
  resolves: #1541355</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.25-1" date="1541419200">- Update to 3.2.25
  resolves: #1646193</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.3.10-1" date="1546948800">- Update to 3.3.10
  resolves: #1664290</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.3.11-2" date="1547467200">- Update to 3.3.11
  resolves: #1665810</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.26-1" date="1550059200">- Downgrade to 3.2.26
  related: #1665810</changelog>
  <changelog author="Jan Chaloupka &lt;jchaloup@redhat.com&gt; - 3.2.28-1" date="1583323200">- Update to 3.2.28
  resolves: #1799006</changelog>
  <changelog author="Suresh Kolichala &lt;skolicha@redhat.com&gt; - 3.2.32-1" date="1617969600">- Update to 3.2.32
  resolves: #1874765,1874769</changelog>
</package>
<package pkgid="6992ce08859d1a9be3b8c1f2f636ce12bb2bf8ccbf8057e82bba7aec3ca962cf" name="evolution-data-server" arch="src">
  <version epoch="0" ver="3.28.5" rel="5.el7_9.1"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.2-1" date="1527681600">- Update to 3.28.2
- Add patch for GNOME bug #795997 (Fails to parse Google OAuth2 authorization code)
- Resolves: #1575495</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-1" date="1529323200">- Update to 3.28.3
- Remove patch for GNOME bug #795997 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529409600">- Add patch for GNOME bug #796174 (strcat() considered unsafe for buffer overflow)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796174 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1549022400">- Add patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1558612800">- Update patch for RH bug #1610744 (test-cal-client-get-revision could fail)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1565784000">- Add patch related to evolution-ews' CVE-2019-3890 (RH bug #1696762)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1587470400">- Resolves: #1772103 (EDBusServer: Delay new module load)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5.1" date="1651752000">- Resolves: #2081786 (Backport patch for Google OAuth2 change)</changelog>
</package>
<package pkgid="fa78f3899154ce03522c55c2e52c513dfafd19d80c43717bc152bb330afa26d1" name="evolution-ews" arch="src">
  <version epoch="0" ver="3.28.5" rel="8.el7_9"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.3-2" date="1529928000">- Add patch for GNOME bug #796297 (Cannot modify existing meeting after fix for this bug)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.4-1" date="1531742400">- Update to 3.28.4
- Remove patch for GNOME bug #796297 (fixed upstream)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-1" date="1532952000">- Update to 3.28.5</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-2" date="1541764800">- Add patches for RH bug #1633711 (Backport few minor regression fixes from 3.30)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-3" date="1565784000">- Add patch for RH bug #1696760 (CVE-2019-3890 - SSL Certificates are not validated)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-4" date="1571918400">- Add patch for RH bug #1392567 (Sync CategoryList with mail Labels)
- Add patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-5" date="1572350400">- Remove patch for RH bug #1764669 (Send meeting change notifications only if being the organizer)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-6" date="1588680000">- Add patch for RH bug #1764669 (Reject creating meetings organized by other users)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-7" date="1603108800">- Resolves: #1887925 (Allow change of the Microsoft 365 OAuth2 endpoints)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.28.5-8" date="1603800000">- Resolves: #1891558 (Birthday date of Contact depends on system timezone)</changelog>
</package>
<package pkgid="ca4cdabc1df05193b0b408985782dcd7e5edaccc35ee33147bb721e29a127492" name="exiv2" arch="src">
  <version epoch="0" ver="0.27.0" rel="4.el7_8"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.23-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.23-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.23-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.26-1" date="1504008000">- Update to 0.26
  Resolves: bz#1420227</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.26-2" date="1519300800">- Fix heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp
  Resolves: bz#1547207

  Fix heap-based buffer over-read in Exiv2::getULong function in types.cpp
  Resolves: bz#1545232</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.26-3" date="1519387200">- Fix uncontrolled recursion in image.cpp:Exiv2::Image::printIFDStructure() which can allow a
  remote attacker to cause a denial of service via a crafted tif file
  Resolves: bz#1548410</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.27.0-1" date="1547553600">- Exiv2 0.27.0
  Resolves: bz#1652637</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.27.0-2" date="1549281600">- Minor improvements
  Resolves: bz#1652637</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.27.0-3" date="1582027200">- Validate relationship of the total size to the offset to avoid crash
  Resolves: bz#1775695</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.27.0-4" date="1628164800">- Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
  Resolves: bz#1990352</changelog>
</package>
<package pkgid="b73eb63d588352ab1ae854852591e9a8e8ad009c3d73d1f6677b07927ec31ebd" name="expat" arch="src">
  <version epoch="0" ver="2.1.0" rel="14.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.1.0-5" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
</package>
<package pkgid="3fa00ae302b0feac8b42dc7b988eec98652df0902d9e589df70eec5482370149" name="expat" arch="src">
  <version epoch="0" ver="2.1.0" rel="15.el7_9"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-6" date="1371470400">- fix "xmlwf -h" output (#948534)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.1.0-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-9" date="1479988800">- add security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-10" date="1479988801">- updated security fix for CVE-2016-0718</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-11" date="1564056000">- add security fix for CVE-2015-2716</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.1.0-12" date="1585828800">- add security fixes for CVE-2018-20843, CVE-2019-15903</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-13" date="1645444800">- Fix multiple CVEs
- CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
- CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
- CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
- CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
- CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
- CVE-2022-22825 Integer overflow in lookup in xmlparse.c
- CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
- CVE-2022-22823 Integer overflow in build_model in xmlparse.c
- CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
- Resolves: CVE-2022-23852
- Resolves: CVE-2021-45960
- Resolves: CVE-2021-46143
- Resolves: CVE-2022-22827
- Resolves: CVE-2022-22826
- Resolves: CVE-2022-22825
- Resolves: CVE-2022-22824
- Resolves: CVE-2022-22823
- Resolves: CVE-2022-22822</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-14" date="1647864000">- Fix multiple CVEs
- CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
- CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
- CVE-2022-25315 expat: integer overflow in storeRawNames()
- Resolves: CVE-2022-25236
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25315</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.0-15" date="1664798400">- Ensure raw tagnames are safe exiting internalEntityParser
- Resolves: CVE-2022-40674</changelog>
</package>
<package pkgid="0d524d9ef3cdd1cc950ca6b676ff6a6695b72ffba812d37b94285f277dda7f4b" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-31" date="1579089600">- fence_compute/fence_evacuate: fix region_name content type and
  project shortopt in usage text and project-domain shortopt
  Resolves: rhbz#1760203
- fence_rhevm: add cookie support
  Resolves: rhbz#1763675
- fencing: improve stdin quote parsing
  Resolves: rhbz#1769784</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
</package>
<package pkgid="69d5fd595d0f5df0837ac80c08910ab2f2406e76c776b9e202007f07927253c6" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-33" date="1582632000">- fence-agents-lpar: build on non-ppc64le arch's
  Resolves: rhbz#1801818</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
</package>
<package pkgid="9df3d24b26bbe742dbdb038cd75795d57ce6b6fa58c5ae690ab28b86dbb95340" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-34" date="1583841600">- fence_aws: improve parameter logic to allow setting region parameter
  while using credentials from ~/.aws/config
  Resolves: rhbz#1673468
-</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
</package>
<package pkgid="11fedac558c69c1d500b87bd44d6436b7b6d4af3e9b8b43926ca5ff8510f1e98" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-35" date="1585224000">- fence_aws: fix possible race condition
  Resolves: rhbz#1816205</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
</package>
<package pkgid="250d624fcb796c66bf017e633e890b14301140281421168e99272b64b68409e5" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.6"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-36" date="1587729600">- fence_vmware_rest: improve exception handling
  Resolves: rhbz#1827561</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-39" date="1589544000">- fence_vmware_rest: add filter parameter to avoid 1000 VM API limit
  and avoid failing when hitting it during the monitor-action
  Resolves: rhbz#1654058</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
</package>
<package pkgid="23d5f3768b3f91dd7bf972e6b0a3baa6c5320584789ccb0725b11aecd1d1b01a" name="fence-agents" arch="src">
  <version epoch="0" ver="4.2.1" rel="41.el7_9.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-40" date="1589889600">- fence_vmware_rest: fix encoding issues
  Resolves: rhbz#1793738</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41" date="1590408000">- fence_aws: improve logging and metadata/usage text
  Resolves: rhbz#1832289</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.1" date="1596456000">- fence_lpar: fix issue with long username, hostname, etc not
  working when the command run by the agent exceeds 80 characters
- fence_evacuate: enable evacuation of instances using private flavors

  Resolves: rhbz#1860545
  Resolves: rhbz#1862024</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.2" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078
  Resolves: rhbz#1850114</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.3" date="1609761600">- fence_aws: add support for IMDSv2
  Resolves: rhbz#1905735</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.4" date="1620820800">- fence_azure_arm: fix MSI support
  Resolves: rhbz#1957762</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.5" date="1634644800">- fence_aws: add "filter" parameter
  Resolves: rhbz#2003189</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.6" date="1644494400">- fence_aws: fix IMDSv2 support
  Resolves: rhbz#2050759</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.7" date="1651147200">- fence_gce: update fence agent
  Resolves: rhbz#2078246</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.2.1-41.8" date="1706011200">- bundled pycryptodome: fix CVE-2023-52323
  Resolves: RHEL-20913</changelog>
</package>
<package pkgid="cb691f79222aa069a3acea575f8bec079a366fccb39a168092f260d614ac45ce" name="firefox" arch="src">
  <version epoch="0" ver="102.10.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.5.0-2" date="1669377600">- Added libwebrtc screencast patch for newer features</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.6.0-1" date="1670328000">- Update to 102.6.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.6.0-2" date="1672660800">- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.0-1" date="1673352000">- Update to 102.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-1" date="1675771200">- Update to 102.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-2" date="1676376000">- Update to 102.8.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.9.0-1" date="1678190400">- Update to 102.9.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.9.0-2" date="1678363200">- removed disable-openh264-download</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.9.0-4" date="1678449600">- Update to 102.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-1" date="1680609600">- Update to 102.10.0 build1</changelog>
</package>
<package pkgid="2628ad3cfa9442705d38e528356c380d37d1270a66f18c5479843b2e6531cf16" name="firefox" arch="src">
  <version epoch="0" ver="102.11.0" rel="2.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.6.0-2" date="1672660800">- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.0-1" date="1673352000">- Update to 102.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-1" date="1675771200">- Update to 102.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-2" date="1676376000">- Update to 102.8.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.9.0-1" date="1678190400">- Update to 102.9.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.9.0-2" date="1678363200">- removed disable-openh264-download</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.9.0-4" date="1678449600">- Update to 102.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-1" date="1680609600">- Update to 102.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-1" date="1683028800">- Update to 102.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-2" date="1683201600">- Update to 102.11.0 build2</changelog>
</package>
<package pkgid="9b5e214c6010ebfa00e9542b8fbab9cc72f320baf4aec8b017a13f419a9643bb" name="firefox" arch="src">
  <version epoch="0" ver="102.12.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-1" date="1675771200">- Update to 102.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-2" date="1676376000">- Update to 102.8.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.9.0-1" date="1678190400">- Update to 102.9.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.9.0-2" date="1678363200">- removed disable-openh264-download</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.9.0-4" date="1678449600">- Update to 102.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-1" date="1680609600">- Update to 102.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-1" date="1683028800">- Update to 102.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-2" date="1683201600">- Update to 102.11.0 build2</changelog>
  <changelog author="Anton Bobrov &lt;abobrov@redhat.com&gt; 102.11.0-2" date="1684843200">- Do not import cert to certdb on override exception:
  rhbz#2118991
  mzbz@1833330</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.12.0-1" date="1685534400">- Update to 102.12.0 build1</changelog>
</package>
<package pkgid="4488e64119487ca0293a00fa9e8ee2975099806a8219de86684d2a0876429019" name="firefox" arch="src">
  <version epoch="0" ver="102.13.0" rel="2.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.9.0-1" date="1678190400">- Update to 102.9.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.9.0-2" date="1678363200">- removed disable-openh264-download</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.9.0-4" date="1678449600">- Update to 102.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-1" date="1680609600">- Update to 102.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-1" date="1683028800">- Update to 102.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-2" date="1683201600">- Update to 102.11.0 build2</changelog>
  <changelog author="Anton Bobrov &lt;abobrov@redhat.com&gt; 102.11.0-2" date="1684843200">- Do not import cert to certdb on override exception:
  rhbz#2118991
  mzbz@1833330</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.12.0-1" date="1685534400">- Update to 102.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.13.0-1" date="1688040000">- Update to 102.13.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.13.0-2" date="1688126400">- Update to 102.13.0 build2</changelog>
</package>
<package pkgid="953731ea9a2a95dbe4e935620f4a2a8d04c66451ea6908625768891dcaa03771" name="firefox" arch="src">
  <version epoch="0" ver="102.14.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.9.0-2" date="1678363200">- removed disable-openh264-download</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.9.0-4" date="1678449600">- Update to 102.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-1" date="1680609600">- Update to 102.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-1" date="1683028800">- Update to 102.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-2" date="1683201600">- Update to 102.11.0 build2</changelog>
  <changelog author="Anton Bobrov &lt;abobrov@redhat.com&gt; 102.11.0-2" date="1684843200">- Do not import cert to certdb on override exception:
  rhbz#2118991
  mzbz@1833330</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.12.0-1" date="1685534400">- Update to 102.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.13.0-1" date="1688040000">- Update to 102.13.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.13.0-2" date="1688126400">- Update to 102.13.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.14.0-1" date="1690286400">- Update to 102.14.0 build1</changelog>
</package>
<package pkgid="aaa0a6b442094e8af57cd8ebe654ce4a1893672a30aec7b65e8b0ebd6e8b3346" name="firefox" arch="src">
  <version epoch="0" ver="102.14.0" rel="3.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-1" date="1680609600">- Update to 102.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-1" date="1683028800">- Update to 102.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-2" date="1683201600">- Update to 102.11.0 build2</changelog>
  <changelog author="Anton Bobrov &lt;abobrov@redhat.com&gt; 102.11.0-2" date="1684843200">- Do not import cert to certdb on override exception:
  rhbz#2118991
  mzbz@1833330</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.12.0-1" date="1685534400">- Update to 102.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.13.0-1" date="1688040000">- Update to 102.13.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.13.0-2" date="1688126400">- Update to 102.13.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.14.0-1" date="1690286400">- Update to 102.14.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.14.0-2" date="1691582400">- Rebuild due to rhbz#2228948</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.14.0-3" date="1691582401">- Bump NVR to rebuild</changelog>
</package>
<package pkgid="361bbb118bdd380cbfd44d9b9a53afeaec21c347cc660cbf3006098b50fc8f8f" name="firefox" arch="src">
  <version epoch="0" ver="102.15.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-1" date="1683028800">- Update to 102.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-2" date="1683201600">- Update to 102.11.0 build2</changelog>
  <changelog author="Anton Bobrov &lt;abobrov@redhat.com&gt; 102.11.0-2" date="1684843200">- Do not import cert to certdb on override exception:
  rhbz#2118991
  mzbz@1833330</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.12.0-1" date="1685534400">- Update to 102.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.13.0-1" date="1688040000">- Update to 102.13.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.13.0-2" date="1688126400">- Update to 102.13.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.14.0-1" date="1690286400">- Update to 102.14.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.14.0-2" date="1691582400">- Rebuild due to rhbz#2228948</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.14.0-3" date="1691582401">- Bump NVR to rebuild</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.15.0-1" date="1692878400">- Update to 102.15.0 build2</changelog>
</package>
<package pkgid="1f3a1a75815b6b709c0704e8c983c153b2bbbafe94b36bb1a3b7f6881a2cc34a" name="firefox" arch="src">
  <version epoch="0" ver="102.15.1" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-2" date="1683201600">- Update to 102.11.0 build2</changelog>
  <changelog author="Anton Bobrov &lt;abobrov@redhat.com&gt; 102.11.0-2" date="1684843200">- Do not import cert to certdb on override exception:
  rhbz#2118991
  mzbz@1833330</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.12.0-1" date="1685534400">- Update to 102.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.13.0-1" date="1688040000">- Update to 102.13.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.13.0-2" date="1688126400">- Update to 102.13.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.14.0-1" date="1690286400">- Update to 102.14.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.14.0-2" date="1691582400">- Rebuild due to rhbz#2228948</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.14.0-3" date="1691582401">- Bump NVR to rebuild</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.15.0-1" date="1692878400">- Update to 102.15.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.15.1-1" date="1694606400">- Update to 102.15.1</changelog>
</package>
<package pkgid="40c2c13a9d9b3441a5511de16b6496c092d7d5353279c07d8ab284e345debffd" name="firefox" arch="src">
  <version epoch="0" ver="102.3.0" rel="6.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.7.0-2" date="1646222400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-3" date="1646654400">- Update to 91.7.0 build3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.8.0-1" date="1649160000">- Update to 91.8.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-1" date="1650974400">- Update to 91.9.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.9.1-1" date="1653048000">- Update to 91.9.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.10.0-1" date="1653393600">- Update to 91.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-1" date="1655812800">- Update to 91.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-2" date="1655985600">- Update to 91.11.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.12.0-1" date="1658404800">- Update to 91.12.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-6" date="1663070400">- Update to 102.3.0 build1</changelog>
</package>
<package pkgid="ca5e9221ff4556f169a6bede955bda2f8ceb58a6ac9645d82d328c262d2452d4" name="firefox" arch="src">
  <version epoch="0" ver="102.3.0" rel="7.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-3" date="1646654400">- Update to 91.7.0 build3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.8.0-1" date="1649160000">- Update to 91.8.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-1" date="1650974400">- Update to 91.9.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.9.1-1" date="1653048000">- Update to 91.9.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.10.0-1" date="1653393600">- Update to 91.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-1" date="1655812800">- Update to 91.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-2" date="1655985600">- Update to 91.11.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.12.0-1" date="1658404800">- Update to 91.12.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-6" date="1663070400">- Update to 102.3.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-7" date="1665489600">- Fix for expat CVE-2022-40674 and non functional webrtc</changelog>
</package>
<package pkgid="b9563a469586201e52d4f3c1eb47a2f42c0023640dfc0faaf36cd750ebb54439" name="firefox" arch="src">
  <version epoch="0" ver="102.4.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.8.0-1" date="1649160000">- Update to 91.8.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-1" date="1650974400">- Update to 91.9.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.9.1-1" date="1653048000">- Update to 91.9.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.10.0-1" date="1653393600">- Update to 91.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-1" date="1655812800">- Update to 91.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-2" date="1655985600">- Update to 91.11.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.12.0-1" date="1658404800">- Update to 91.12.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-6" date="1663070400">- Update to 102.3.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-7" date="1665489600">- Fix for expat CVE-2022-40674 and non functional webrtc</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.4.0-1" date="1665576000">- Update to 102.4.0 build1</changelog>
</package>
<package pkgid="741a7beebb52c13bc8c6590497042ab1c3ce50b46d2bd804aeee2b1f7ba0e460" name="firefox" arch="src">
  <version epoch="0" ver="102.5.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-1" date="1650974400">- Update to 91.9.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.9.1-1" date="1653048000">- Update to 91.9.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.10.0-1" date="1653393600">- Update to 91.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-1" date="1655812800">- Update to 91.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-2" date="1655985600">- Update to 91.11.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.12.0-1" date="1658404800">- Update to 91.12.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-6" date="1663070400">- Update to 102.3.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-7" date="1665489600">- Fix for expat CVE-2022-40674 and non functional webrtc</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.4.0-1" date="1665576000">- Update to 102.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.5.0-1" date="1667995200">- Update to 102.5.0 build1</changelog>
</package>
<package pkgid="cc65482f30e56afd4189c7d807df5d0f92074aded1d5d40058c8fa716505c751" name="firefox" arch="src">
  <version epoch="0" ver="102.6.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.10.0-1" date="1653393600">- Update to 91.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-1" date="1655812800">- Update to 91.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-2" date="1655985600">- Update to 91.11.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.12.0-1" date="1658404800">- Update to 91.12.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-6" date="1663070400">- Update to 102.3.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-7" date="1665489600">- Fix for expat CVE-2022-40674 and non functional webrtc</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.4.0-1" date="1665576000">- Update to 102.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.5.0-1" date="1667995200">- Update to 102.5.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.5.0-2" date="1669377600">- Added libwebrtc screencast patch for newer features</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.6.0-1" date="1670328000">- Update to 102.6.0 build1</changelog>
</package>
<package pkgid="ac62b8b984f76668a9f96cb900a896f29f32cf6b05f351dd27f1556a46f28e06" name="firefox" arch="src">
  <version epoch="0" ver="102.7.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-2" date="1655985600">- Update to 91.11.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.12.0-1" date="1658404800">- Update to 91.12.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-6" date="1663070400">- Update to 102.3.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-7" date="1665489600">- Fix for expat CVE-2022-40674 and non functional webrtc</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.4.0-1" date="1665576000">- Update to 102.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.5.0-1" date="1667995200">- Update to 102.5.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.5.0-2" date="1669377600">- Added libwebrtc screencast patch for newer features</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.6.0-1" date="1670328000">- Update to 102.6.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.6.0-2" date="1672660800">- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.0-1" date="1673352000">- Update to 102.7.0 build1</changelog>
</package>
<package pkgid="f35343405441d1309745491610eb273f17b70026ccfde8364b761d25b60d5762" name="firefox" arch="src">
  <version epoch="0" ver="102.8.0" rel="2.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-6" date="1663070400">- Update to 102.3.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-7" date="1665489600">- Fix for expat CVE-2022-40674 and non functional webrtc</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.4.0-1" date="1665576000">- Update to 102.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.5.0-1" date="1667995200">- Update to 102.5.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.5.0-2" date="1669377600">- Added libwebrtc screencast patch for newer features</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.6.0-1" date="1670328000">- Update to 102.6.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.6.0-2" date="1672660800">- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.0-1" date="1673352000">- Update to 102.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-1" date="1675771200">- Update to 102.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-2" date="1676376000">- Update to 102.8.0 build2</changelog>
</package>
<package pkgid="506f56ef04a76e084e03577f1a4cd5a977a093ab8c66822e644cd073c0fc8198" name="firefox" arch="src">
  <version epoch="0" ver="102.9.0" rel="3.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.5.0-1" date="1667995200">- Update to 102.5.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.5.0-2" date="1669377600">- Added libwebrtc screencast patch for newer features</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.6.0-1" date="1670328000">- Update to 102.6.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.6.0-2" date="1672660800">- Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.0-1" date="1673352000">- Update to 102.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-1" date="1675771200">- Update to 102.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-2" date="1676376000">- Update to 102.8.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.9.0-1" date="1678190400">- Update to 102.9.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.9.0-2" date="1678363200">- removed disable-openh264-download</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.9.0-3" date="1678449600">- Update to 102.9.0 build2</changelog>
</package>
<package pkgid="16e9fd76c26b65b4fc120ff362a647b505bf1decf53c35add81a70958852c033" name="firefox" arch="src">
  <version epoch="0" ver="115.10.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-1" date="1697544000">- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URL</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.5.0-1" date="1699963200">- Update to 115.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.6.0-1" date="1702382400">- Update to 115.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.7.0-1" date="1705406400">- Update to 115.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.8.0-1" date="1707825600">- Update to 115.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.0-1" date="1710244800">- Update to 115.9.0 build1
- Fix expat CVE-2023-52425</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.0-2" date="1710504000">- Update to 115.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.1-1" date="1711108800">- Update to 115.9.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.9.1-2" date="1712664000">- Removed expat CVE fix</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.10.0-1" date="1712664001">- Update to 115.10.0 build1</changelog>
</package>
<package pkgid="b334998d731f886e9a20a113c2ab37e896580d4e31e012d26445b9dd2f3d981c" name="firefox" arch="src">
  <version epoch="0" ver="115.11.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.5.0-1" date="1699963200">- Update to 115.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.6.0-1" date="1702382400">- Update to 115.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.7.0-1" date="1705406400">- Update to 115.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.8.0-1" date="1707825600">- Update to 115.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.0-1" date="1710244800">- Update to 115.9.0 build1
- Fix expat CVE-2023-52425</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.0-2" date="1710504000">- Update to 115.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.1-1" date="1711108800">- Update to 115.9.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.9.1-2" date="1712664000">- Removed expat CVE fix</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.10.0-1" date="1712664001">- Update to 115.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.11.0-1" date="1715083200">- Update to 115.11.0 build1</changelog>
</package>
<package pkgid="337bc2db09d297c7b7bcae7797e1d42f83d03400a2e2407488750048e775ae89" name="firefox" arch="src">
  <version epoch="0" ver="115.12.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.6.0-1" date="1702382400">- Update to 115.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.7.0-1" date="1705406400">- Update to 115.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.8.0-1" date="1707825600">- Update to 115.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.0-1" date="1710244800">- Update to 115.9.0 build1
- Fix expat CVE-2023-52425</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.0-2" date="1710504000">- Update to 115.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.1-1" date="1711108800">- Update to 115.9.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.9.1-2" date="1712664000">- Removed expat CVE fix</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.10.0-1" date="1712664001">- Update to 115.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.11.0-1" date="1715083200">- Update to 115.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.12.0-1" date="1717502400">- Update to 115.12.0 build1</changelog>
</package>
<package pkgid="df7891c1a7d5789ae4d9db8a04705494a912902ca3aed6dfcf92570d265f2f7b" name="firefox" arch="src">
  <version epoch="0" ver="115.3.1" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.9.0-4" date="1678449600">- Update to 102.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-1" date="1680609600">- Update to 102.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-1" date="1683028800">- Update to 102.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-2" date="1683201600">- Update to 102.11.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.0b8-1" date="1687348800">- Update to 115.0b8</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.0.2-1" date="1689595200">- Update to 115.0.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.1.0-1" date="1690977600">- Update to 115.1.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.2.0-3" date="1693828800">- Update to 115.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.3.0-1" date="1695297600">- Update to 115.3.0 ESR</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.1-1" date="1695988800">- Update to 115.3.1</changelog>
</package>
<package pkgid="e2daf48600953a8436440a50e46f23d64b415787f4ef088cd21ce17ccea515d6" name="firefox" arch="src">
  <version epoch="0" ver="115.4.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-1" date="1680609600">- Update to 102.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-1" date="1683028800">- Update to 102.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-2" date="1683201600">- Update to 102.11.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.0b8-1" date="1687348800">- Update to 115.0b8</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.0.2-1" date="1689595200">- Update to 115.0.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.1.0-1" date="1690977600">- Update to 115.1.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.2.0-3" date="1693828800">- Update to 115.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.3.0-1" date="1695297600">- Update to 115.3.0 ESR</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.1-1" date="1695988800">- Update to 115.3.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-1" date="1697544000">- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URL</changelog>
</package>
<package pkgid="f71ea9d41707b9e4d2008d619529f9d0676b671716782ea4c7c8792eec275bd4" name="firefox" arch="src">
  <version epoch="0" ver="115.5.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-1" date="1683028800">- Update to 102.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-2" date="1683201600">- Update to 102.11.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.0b8-1" date="1687348800">- Update to 115.0b8</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.0.2-1" date="1689595200">- Update to 115.0.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.1.0-1" date="1690977600">- Update to 115.1.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.2.0-3" date="1693828800">- Update to 115.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.3.0-1" date="1695297600">- Update to 115.3.0 ESR</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.1-1" date="1695988800">- Update to 115.3.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-1" date="1697544000">- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URL</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.5.0-1" date="1699963200">- Update to 115.5.0 build1</changelog>
</package>
<package pkgid="4e6777024beedf5ad0c5a637470fb624bd0db57518c92799d5a883af1caa5bb1" name="firefox" arch="src">
  <version epoch="0" ver="115.6.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-2" date="1683201600">- Update to 102.11.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.0b8-1" date="1687348800">- Update to 115.0b8</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.0.2-1" date="1689595200">- Update to 115.0.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.1.0-1" date="1690977600">- Update to 115.1.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.2.0-3" date="1693828800">- Update to 115.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.3.0-1" date="1695297600">- Update to 115.3.0 ESR</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.1-1" date="1695988800">- Update to 115.3.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-1" date="1697544000">- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URL</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.5.0-1" date="1699963200">- Update to 115.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.6.0-1" date="1702382400">- Update to 115.6.0 build1</changelog>
</package>
<package pkgid="5a3984b33126b643cc55c139d77188e5a15cd2579b0e9c0cfa6fc7fba0902af9" name="firefox" arch="src">
  <version epoch="0" ver="115.7.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.0b8-1" date="1687348800">- Update to 115.0b8</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.0.2-1" date="1689595200">- Update to 115.0.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.1.0-1" date="1690977600">- Update to 115.1.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.2.0-3" date="1693828800">- Update to 115.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.3.0-1" date="1695297600">- Update to 115.3.0 ESR</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.1-1" date="1695988800">- Update to 115.3.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-1" date="1697544000">- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URL</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.5.0-1" date="1699963200">- Update to 115.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.6.0-1" date="1702382400">- Update to 115.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.7.0-1" date="1705406400">- Update to 115.7.0 build1</changelog>
</package>
<package pkgid="1b8c251730ba5dfc625a9cf1ebc034e26c792be8d8055a78b170ab56526ab6f4" name="firefox" arch="src">
  <version epoch="0" ver="115.8.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.0.2-1" date="1689595200">- Update to 115.0.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.1.0-1" date="1690977600">- Update to 115.1.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.2.0-3" date="1693828800">- Update to 115.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.3.0-1" date="1695297600">- Update to 115.3.0 ESR</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.1-1" date="1695988800">- Update to 115.3.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-1" date="1697544000">- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URL</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.5.0-1" date="1699963200">- Update to 115.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.6.0-1" date="1702382400">- Update to 115.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.7.0-1" date="1705406400">- Update to 115.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.8.0-1" date="1707825600">- Update to 115.8.0 build1</changelog>
</package>
<package pkgid="7a88711ce4c5da0287db2cb9a65313a655f143f6674aa3c3b0ac135d5ce5bb11" name="firefox" arch="src">
  <version epoch="0" ver="115.9.1" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.3.0-1" date="1695297600">- Update to 115.3.0 ESR</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.1-1" date="1695988800">- Update to 115.3.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-1" date="1697544000">- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URL</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.5.0-1" date="1699963200">- Update to 115.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.6.0-1" date="1702382400">- Update to 115.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.7.0-1" date="1705406400">- Update to 115.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.8.0-1" date="1707825600">- Update to 115.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.0-1" date="1710244800">- Update to 115.9.0 build1
- Fix expat CVE-2023-52425</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.0-2" date="1710504000">- Update to 115.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.1-1" date="1711108800">- Update to 115.9.1</changelog>
</package>
<package pkgid="c7c823d8b8729640497b179b425bdad23d322284eac13bf1720e8d6e37b04eb8" name="firefox" arch="src">
  <version epoch="0" ver="115.9.1" rel="2.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.1-1" date="1695988800">- Update to 115.3.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-1" date="1697544000">- Update to 115.4.0 build1
- Add fix for CVE-2023-44488
- Set homepage from os-release HOME_URL</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.5.0-1" date="1699963200">- Update to 115.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.6.0-1" date="1702382400">- Update to 115.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.7.0-1" date="1705406400">- Update to 115.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.8.0-1" date="1707825600">- Update to 115.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.0-1" date="1710244800">- Update to 115.9.0 build1
- Fix expat CVE-2023-52425</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.0-2" date="1710504000">- Update to 115.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.1-1" date="1711108800">- Update to 115.9.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.9.1-2" date="1712664000">- Removed expat CVE fix</changelog>
</package>
<package pkgid="e2deb016db2a2d5e96fbe16336e283f5651b10d7bb35c07c47abaca823a5062d" name="firefox" arch="src">
  <version epoch="0" ver="78.10.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.5.0-1" date="1605700800">- Update to 78.5.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.6.0-1" date="1607601600">- Update to 78.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.6.1-1" date="1609934400">- Update to 78.6.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.0-1" date="1611144000">- Update to 78.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.0-2" date="1611316800">- Update to 78.7.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.7.0-3" date="1612872000">- Fixing install prefix for the homepage</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.1-1" date="1612872001">- Update to 78.7.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.8.0-1" date="1613563200">- Update to 78.8.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-1" date="1615982400">- Update to 78.9.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.10.0-1" date="1618920000">- Update to 78.10.0</changelog>
</package>
<package pkgid="120c458d4093e72c2c14ed9860a29f7f1934d35af0e5739b896295b653f7cbcf" name="firefox" arch="src">
  <version epoch="0" ver="78.11.0" rel="3.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.0-1" date="1611144000">- Update to 78.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.0-2" date="1611316800">- Update to 78.7.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.7.0-3" date="1612872000">- Fixing install prefix for the homepage</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.1-1" date="1612872001">- Update to 78.7.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.8.0-1" date="1613563200">- Update to 78.8.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-1" date="1615982400">- Update to 78.9.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.10.0-1" date="1618920000">- Update to 78.10.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.11.0-1" date="1621944000">- Update to 78.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.11.0-2" date="1622116800">- Fix rhel_minor_version for dist .el8_4 and .el8</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.11.0-3" date="1622462400">- Update to 78.11.0 build2 (release)</changelog>
</package>
<package pkgid="9e3ac04e0928c8bb0eb0c22a93cb7c67739ca8e98dee892f1bc7c2f33d244f64" name="firefox" arch="src">
  <version epoch="0" ver="78.12.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.0-2" date="1611316800">- Update to 78.7.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.7.0-3" date="1612872000">- Fixing install prefix for the homepage</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.1-1" date="1612872001">- Update to 78.7.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.8.0-1" date="1613563200">- Update to 78.8.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-1" date="1615982400">- Update to 78.9.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.10.0-1" date="1618920000">- Update to 78.10.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.11.0-1" date="1621944000">- Update to 78.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.11.0-2" date="1622116800">- Fix rhel_minor_version for dist .el8_4 and .el8</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.11.0-3" date="1622462400">- Update to 78.11.0 build2 (release)</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.12.0-1" date="1625659200">- Update to 78.12.0 build1</changelog>
</package>
<package pkgid="a563a2f08d32e330e7c60aeb797eec82f3362b38686beadd9a97612e971e254f" name="firefox" arch="src">
  <version epoch="0" ver="78.13.0" rel="2.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.8.0-1" date="1613563200">- Update to 78.8.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-1" date="1615982400">- Update to 78.9.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.10.0-1" date="1618920000">- Update to 78.10.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.11.0-1" date="1621944000">- Update to 78.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.11.0-2" date="1622116800">- Fix rhel_minor_version for dist .el8_4 and .el8</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.11.0-3" date="1622462400">- Update to 78.11.0 build2 (release)</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.12.0-1" date="1625659200">- Update to 78.12.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.12.0-2" date="1626436800">- Rebuild to pickup older nss</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.13.0-1" date="1627992000">- Update to 78.13.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.13.0-2" date="1628164800">- Update to 78.13.0 build2</changelog>
</package>
<package pkgid="239ed9c8c7afde7a0992c4e64cfc2780b52121e6c117bb3ece6f35ab8b337704" name="firefox" arch="src">
  <version epoch="0" ver="78.14.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-1" date="1615982400">- Update to 78.9.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.10.0-1" date="1618920000">- Update to 78.10.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.11.0-1" date="1621944000">- Update to 78.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.11.0-2" date="1622116800">- Fix rhel_minor_version for dist .el8_4 and .el8</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.11.0-3" date="1622462400">- Update to 78.11.0 build2 (release)</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.12.0-1" date="1625659200">- Update to 78.12.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.12.0-2" date="1626436800">- Rebuild to pickup older nss</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.13.0-1" date="1627992000">- Update to 78.13.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.13.0-2" date="1628164800">- Update to 78.13.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.14.0-1" date="1630584000">- Update to 78.14.0 build1</changelog>
</package>
<package pkgid="cdee0299b697b9da006d7b753c6ac36fbe4bb0d24b43e2d3bc8223c21098e16e" name="firefox" arch="src">
  <version epoch="0" ver="78.4.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.7.0-2" date="1586260800">- Update to 68.7.0 build3</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 68.7.0-3" date="1587643200">- Added fix for rhbz#1821418</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1588161600">- Update to 68.8.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1589198400">- Added s390x specific patches</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1590753600">- Update to 68.9.0 build1
- Added patch for pipewire 0.3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1593172800">- Update to 68.10.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1595592000">- Update to 68.11.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.2.0-3" date="1597752000">- Update to 78.2.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1600430400">- Update to 78.3.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-1" date="1602849600">- Update to 78.4.0 build2</changelog>
</package>
<package pkgid="27a186ff3519660e0a7b44324347ab4818f1c3717c81fce7815add1c1b068e7e" name="firefox" arch="src">
  <version epoch="0" ver="78.4.1" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1589198400">- Added s390x specific patches</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1590753600">- Update to 68.9.0 build1
- Added patch for pipewire 0.3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1593172800">- Update to 68.10.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1595592000">- Update to 68.11.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.2.0-3" date="1597752000">- Update to 78.2.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1600430400">- Update to 78.3.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-1" date="1602849600">- Update to 78.4.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-2" date="1603972800">- Enable addon sideloading</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-3" date="1605009600">- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loading</changelog>
  <changelog author="erack@redhat.com - 78.4.1-1" date="1605009601">- Update to 78.4.1
- Filtering nss/nspr libs</changelog>
</package>
<package pkgid="ce9ad2ba5d1ef0e107e6618d05f3b9be6b319e729a82d623b811e220295c0f66" name="firefox" arch="src">
  <version epoch="0" ver="78.5.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1590753600">- Update to 68.9.0 build1
- Added patch for pipewire 0.3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1593172800">- Update to 68.10.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1595592000">- Update to 68.11.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.2.0-3" date="1597752000">- Update to 78.2.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1600430400">- Update to 78.3.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-1" date="1602849600">- Update to 78.4.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-2" date="1603972800">- Enable addon sideloading</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-3" date="1605009600">- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loading</changelog>
  <changelog author="erack@redhat.com - 78.4.1-1" date="1605009601">- Update to 78.4.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.5.0-1" date="1605700800">- Update to 78.5.0 build1</changelog>
</package>
<package pkgid="0482e5759e01c32d2a773fb954c2cbd9cbdffea7c1a270e16d791a1384c093ec" name="firefox" arch="src">
  <version epoch="0" ver="78.6.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1593172800">- Update to 68.10.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1595592000">- Update to 68.11.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.2.0-3" date="1597752000">- Update to 78.2.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1600430400">- Update to 78.3.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-1" date="1602849600">- Update to 78.4.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-2" date="1603972800">- Enable addon sideloading</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-3" date="1605009600">- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loading</changelog>
  <changelog author="erack@redhat.com - 78.4.1-1" date="1605009601">- Update to 78.4.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.5.0-1" date="1605700800">- Update to 78.5.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.6.0-1" date="1607601600">- Update to 78.6.0 build1</changelog>
</package>
<package pkgid="7303f761eaa0c873ada3919c55812eb130ad63d81e11a567ce0edef7b1048318" name="firefox" arch="src">
  <version epoch="0" ver="78.6.1" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1595592000">- Update to 68.11.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.2.0-3" date="1597752000">- Update to 78.2.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1600430400">- Update to 78.3.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-1" date="1602849600">- Update to 78.4.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-2" date="1603972800">- Enable addon sideloading</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-3" date="1605009600">- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loading</changelog>
  <changelog author="erack@redhat.com - 78.4.1-1" date="1605009601">- Update to 78.4.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.5.0-1" date="1605700800">- Update to 78.5.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.6.0-1" date="1607601600">- Update to 78.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.6.1-1" date="1609934400">- Update to 78.6.1 build1</changelog>
</package>
<package pkgid="121312ae1fcf2c6087da278a227d2054ae074b00b8a259a9d3f0151e32c6ab3d" name="firefox" arch="src">
  <version epoch="0" ver="78.7.0" rel="2.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1600430400">- Update to 78.3.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-1" date="1602849600">- Update to 78.4.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-2" date="1603972800">- Enable addon sideloading</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-3" date="1605009600">- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loading</changelog>
  <changelog author="erack@redhat.com - 78.4.1-1" date="1605009601">- Update to 78.4.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.5.0-1" date="1605700800">- Update to 78.5.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.6.0-1" date="1607601600">- Update to 78.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.6.1-1" date="1609934400">- Update to 78.6.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.0-1" date="1611144000">- Update to 78.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.0-2" date="1611316800">- Update to 78.7.0 build2</changelog>
</package>
<package pkgid="67c7742e6b24e97bf878ca8514161bd978d8c53556eadca733de1316181a422b" name="firefox" arch="src">
  <version epoch="0" ver="78.8.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.4.0-3" date="1605009600">- Fixing flatpak build, fixing firefox.sh.in to not disable langpacks loading</changelog>
  <changelog author="erack@redhat.com - 78.4.1-1" date="1605009601">- Update to 78.4.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.5.0-1" date="1605700800">- Update to 78.5.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.6.0-1" date="1607601600">- Update to 78.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.6.1-1" date="1609934400">- Update to 78.6.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.0-1" date="1611144000">- Update to 78.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.0-2" date="1611316800">- Update to 78.7.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.7.0-3" date="1612872000">- Fixing install prefix for the homepage</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.1-1" date="1612872001">- Update to 78.7.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.8.0-1" date="1613563200">- Update to 78.8.0 build2</changelog>
</package>
<package pkgid="0eb135fa049848993d9b3d9daa76f871a714cfdb4c12151c57ce878b6eb7f5ce" name="firefox" arch="src">
  <version epoch="0" ver="78.9.0" rel="1.el7_9"/>
  <changelog author="erack@redhat.com - 78.4.1-1" date="1605009600">- Update to 78.4.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.5.0-1" date="1605700800">- Update to 78.5.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.6.0-1" date="1607601600">- Update to 78.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.6.1-1" date="1609934400">- Update to 78.6.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.0-1" date="1611144000">- Update to 78.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.0-2" date="1611316800">- Update to 78.7.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.7.0-3" date="1612872000">- Fixing install prefix for the homepage</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.1-1" date="1612872001">- Update to 78.7.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.8.0-1" date="1613563200">- Update to 78.8.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-1" date="1615982400">- Update to 78.9.0 build1</changelog>
</package>
<package pkgid="c3d9915eb0e0e4691284de707887aa8c9528cc5694e9f25ecac4fe58d2e96fb6" name="firefox" arch="src">
  <version epoch="0" ver="91.10.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.5.0-2" date="1643803200">- Use default update channel to fix non working enterprise policies:
  rhbz#2044667</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.6.0-1" date="1643803201">- Update to 91.6.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.6.0-2" date="1645790400">- Install langpacks to the browser/extensions to make them available in UI:
  rhbz#2030190</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-1" date="1646136000">- Update to 91.7.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.7.0-2" date="1646222400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-3" date="1646654400">- Update to 91.7.0 build3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.8.0-1" date="1649160000">- Update to 91.8.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-1" date="1650974400">- Update to 91.9.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.9.1-1" date="1653048000">- Update to 91.9.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.10.0-1" date="1653393600">- Update to 91.10.0 build1</changelog>
</package>
<package pkgid="d45101526ab9f6d4a64e56fea07545b3b0e1a7a8bed19b681b914cc07d223da5" name="firefox" arch="src">
  <version epoch="0" ver="91.11.0" rel="2.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.6.0-2" date="1645790400">- Install langpacks to the browser/extensions to make them available in UI:
  rhbz#2030190</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-1" date="1646136000">- Update to 91.7.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.7.0-2" date="1646222400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-3" date="1646654400">- Update to 91.7.0 build3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.8.0-1" date="1649160000">- Update to 91.8.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-1" date="1650974400">- Update to 91.9.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.9.1-1" date="1653048000">- Update to 91.9.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.10.0-1" date="1653393600">- Update to 91.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-1" date="1655812800">- Update to 91.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-2" date="1655985600">- Update to 91.11.0 build2</changelog>
</package>
<package pkgid="f643fa6384737bec7115f7d47eefae094051ee7bd431c67ef6891e3e373dfbb0" name="firefox" arch="src">
  <version epoch="0" ver="91.12.0" rel="2.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-1" date="1646136000">- Update to 91.7.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.7.0-2" date="1646222400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-3" date="1646654400">- Update to 91.7.0 build3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.8.0-1" date="1649160000">- Update to 91.8.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-1" date="1650974400">- Update to 91.9.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.9.1-1" date="1653048000">- Update to 91.9.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.10.0-1" date="1653393600">- Update to 91.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-1" date="1655812800">- Update to 91.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-2" date="1655985600">- Update to 91.11.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.12.0-1" date="1658404800">- Update to 91.12.0 build1</changelog>
</package>
<package pkgid="d8dd8f8b3da250d6d398bd4a6b3a53e4e9a2a9425a891ab8a381a7abd498dd66" name="firefox" arch="src">
  <version epoch="0" ver="91.13.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.7.0-2" date="1646222400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-3" date="1646654400">- Update to 91.7.0 build3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.8.0-1" date="1649160000">- Update to 91.8.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-1" date="1650974400">- Update to 91.9.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.9.1-1" date="1653048000">- Update to 91.9.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.10.0-1" date="1653393600">- Update to 91.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-1" date="1655812800">- Update to 91.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-2" date="1655985600">- Update to 91.11.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.12.0-1" date="1658404800">- Update to 91.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.13.0-1" date="1660737600">- Update to 91.13.0 build1</changelog>
</package>
<package pkgid="8be7d773148e558c73f0e3ccc24ba7d700d8ef22a944a169376081632df54190" name="firefox" arch="src">
  <version epoch="0" ver="91.2.0" rel="4.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.11.0-2" date="1622116800">- Fix rhel_minor_version for dist .el8_4 and .el8</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.11.0-3" date="1622462400">- Update to 78.11.0 build2 (release)</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.12.0-1" date="1625659200">- Update to 78.12.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.12.0-2" date="1626436800">- Rebuild to pickup older nss</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.0-1" date="1627560000">- Update to 91.0b8</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.0-1" date="1628596800">- Update to 91.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1629201600">- Update to 91.0.1 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.1.0-1" date="1631707200">- Update to 91.1.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.2.0-3" date="1632916800">- Update to 91.2.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.2.0-4" date="1633348800">- Disable webrender on the s390x due to wrong colors: rhbz#2009503</changelog>
</package>
<package pkgid="a73d013bc84e206d0429136ffb4781375a672d5f71786b4948609d407f87ea48" name="firefox" arch="src">
  <version epoch="0" ver="91.2.0" rel="5.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.11.0-3" date="1622462400">- Update to 78.11.0 build2 (release)</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.12.0-1" date="1625659200">- Update to 78.12.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.12.0-2" date="1626436800">- Rebuild to pickup older nss</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.0-1" date="1627560000">- Update to 91.0b8</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.0-1" date="1628596800">- Update to 91.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1629201600">- Update to 91.0.1 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.1.0-1" date="1631707200">- Update to 91.1.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.2.0-3" date="1632916800">- Update to 91.2.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.2.0-4" date="1633348800">- Disable webrender on the s390x due to wrong colors: rhbz#2009503</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.2.0-5" date="1634817600">- Fixed crashes when FIPS is enabled.</changelog>
</package>
<package pkgid="20ade22ad3b6767e590a9e230d15b1d3a9d94e01279a2a5026c11893c6c780c9" name="firefox" arch="src">
  <version epoch="0" ver="91.3.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.12.0-1" date="1625659200">- Update to 78.12.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.12.0-2" date="1626436800">- Rebuild to pickup older nss</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.0-1" date="1627560000">- Update to 91.0b8</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.0-1" date="1628596800">- Update to 91.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1629201600">- Update to 91.0.1 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.1.0-1" date="1631707200">- Update to 91.1.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.2.0-3" date="1632916800">- Update to 91.2.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.2.0-4" date="1633348800">- Disable webrender on the s390x due to wrong colors: rhbz#2009503</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.2.0-5" date="1634817600">- Fixed crashes when FIPS is enabled.</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.3.0-1" date="1635768000">- Update to 91.3.0 build1</changelog>
</package>
<package pkgid="e018735a03708f2dd3cdf1378aeafa24c3c5f5346a6b6035953e37baccc514bd" name="firefox" arch="src">
  <version epoch="0" ver="91.4.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.12.0-2" date="1626436800">- Rebuild to pickup older nss</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.0-1" date="1627560000">- Update to 91.0b8</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.0-1" date="1628596800">- Update to 91.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1629201600">- Update to 91.0.1 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.1.0-1" date="1631707200">- Update to 91.1.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.2.0-3" date="1632916800">- Update to 91.2.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.2.0-4" date="1633348800">- Disable webrender on the s390x due to wrong colors: rhbz#2009503</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.2.0-5" date="1634817600">- Fixed crashes when FIPS is enabled.</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.3.0-1" date="1635768000">- Update to 91.3.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-1" date="1638360000">- Update to 91.4.0 build1</changelog>
</package>
<package pkgid="b74622321dc017ad5eac5553b272fc437aa0231d0bf1366ee1cc68629f71de0e" name="firefox" arch="src">
  <version epoch="0" ver="91.5.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.0-1" date="1627560000">- Update to 91.0b8</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.0-1" date="1628596800">- Update to 91.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt;" date="1629201600">- Update to 91.0.1 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.1.0-1" date="1631707200">- Update to 91.1.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.2.0-3" date="1632916800">- Update to 91.2.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.2.0-4" date="1633348800">- Disable webrender on the s390x due to wrong colors: rhbz#2009503</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.2.0-5" date="1634817600">- Fixed crashes when FIPS is enabled.</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.3.0-1" date="1635768000">- Update to 91.3.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-1" date="1638360000">- Update to 91.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.5.0-1" date="1641470400">- Update to 91.5.0 build1</changelog>
</package>
<package pkgid="284ae91403a545904b6da64d915897b05e36439ac97da2f5610cfe9a8482ca13" name="firefox" arch="src">
  <version epoch="0" ver="91.6.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.1.0-1" date="1631707200">- Update to 91.1.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.2.0-3" date="1632916800">- Update to 91.2.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.2.0-4" date="1633348800">- Disable webrender on the s390x due to wrong colors: rhbz#2009503</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.2.0-5" date="1634817600">- Fixed crashes when FIPS is enabled.</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.3.0-1" date="1635768000">- Update to 91.3.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-1" date="1638360000">- Update to 91.4.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.4.0-2" date="1639396800">- Added fix for failing addons signatures.</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.5.0-1" date="1641470400">- Update to 91.5.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.5.0-2" date="1643803200">- Use default update channel to fix non working enterprise policies:
  rhbz#2044667</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.6.0-1" date="1643803201">- Update to 91.6.0 build1</changelog>
</package>
<package pkgid="adf0547f3103b5414e9e3fafbd415830427487800201b7d68b270512ed571231" name="firefox" arch="src">
  <version epoch="0" ver="91.7.0" rel="3.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.3.0-1" date="1635768000">- Update to 91.3.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-1" date="1638360000">- Update to 91.4.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.4.0-2" date="1639396800">- Added fix for failing addons signatures.</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.5.0-1" date="1641470400">- Update to 91.5.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.5.0-2" date="1643803200">- Use default update channel to fix non working enterprise policies:
  rhbz#2044667</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.6.0-1" date="1643803201">- Update to 91.6.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.6.0-2" date="1645790400">- Install langpacks to the browser/extensions to make them available in UI:
  rhbz#2030190</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-1" date="1646136000">- Update to 91.7.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.7.0-2" date="1646222400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-3" date="1646654400">- Update to 91.7.0 build3</changelog>
</package>
<package pkgid="4700256cf33d24d73dcb114ae38ad4cca183e8dcd57dec5b6d81c6ca5ade1fc0" name="firefox" arch="src">
  <version epoch="0" ver="91.8.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-1" date="1638360000">- Update to 91.4.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.4.0-2" date="1639396800">- Added fix for failing addons signatures.</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.5.0-1" date="1641470400">- Update to 91.5.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.5.0-2" date="1643803200">- Use default update channel to fix non working enterprise policies:
  rhbz#2044667</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.6.0-1" date="1643803201">- Update to 91.6.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.6.0-2" date="1645790400">- Install langpacks to the browser/extensions to make them available in UI:
  rhbz#2030190</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-1" date="1646136000">- Update to 91.7.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.7.0-2" date="1646222400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-3" date="1646654400">- Update to 91.7.0 build3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.8.0-1" date="1649160000">- Update to 91.8.0</changelog>
</package>
<package pkgid="960096b135e4bc66fbdfc4ac78c8403ef210c0282f8e7f20c4007712758738f4" name="firefox" arch="src">
  <version epoch="0" ver="91.9.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.4.0-2" date="1639396800">- Added fix for failing addons signatures.</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.5.0-1" date="1641470400">- Update to 91.5.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.5.0-2" date="1643803200">- Use default update channel to fix non working enterprise policies:
  rhbz#2044667</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.6.0-1" date="1643803201">- Update to 91.6.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.6.0-2" date="1645790400">- Install langpacks to the browser/extensions to make them available in UI:
  rhbz#2030190</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-1" date="1646136000">- Update to 91.7.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.7.0-2" date="1646222400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-3" date="1646654400">- Update to 91.7.0 build3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.8.0-1" date="1649160000">- Update to 91.8.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-1" date="1650974400">- Update to 91.9.0</changelog>
</package>
<package pkgid="9cf77bcf4fd33780752950e48bb8a753cf6a7d9915945f7a197502474e7e13e1" name="firefox" arch="src">
  <version epoch="0" ver="91.9.1" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.5.0-1" date="1641470400">- Update to 91.5.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.5.0-2" date="1643803200">- Use default update channel to fix non working enterprise policies:
  rhbz#2044667</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.6.0-1" date="1643803201">- Update to 91.6.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.6.0-2" date="1645790400">- Install langpacks to the browser/extensions to make them available in UI:
  rhbz#2030190</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-1" date="1646136000">- Update to 91.7.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.7.0-2" date="1646222400">- Added expat backports of CVE-2022-25235, CVE-2022-25236 and CVE-2022-25315</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-3" date="1646654400">- Update to 91.7.0 build3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.8.0-1" date="1649160000">- Update to 91.8.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-1" date="1650974400">- Update to 91.9.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.9.1-1" date="1653048000">- Update to 91.9.1 build1</changelog>
</package>
<package pkgid="29111c13465c82ae51952b0c937fd9cc3ae5b858b3a1e5d51407320d0d39409f" name="firewalld" arch="src">
  <version epoch="0" ver="0.6.3" rel="12.el7"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-3" date="1564401600">- backport recent upstream stable fixes
- backport fix --remove-rules deleting all direct rules
- backport fix unable to delete rich rule forward-port
- backport fix forward-port for external zone hijacking internal zone
- backport fix testsuite iptables locking</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
</package>
<package pkgid="3c9e47fbfa1e2b884798ceb56233812706e38c313d7f4f0cc1ae02bfada42584" name="firewalld" arch="src">
  <version epoch="0" ver="0.6.3" rel="13.el7_9"/>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-4" date="1565611200">- fix: guarantee zone source dispatch is sorted by zone name</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-5" date="1565611201">- doc: add --default-config and --system-config</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-6" date="1567512000">- fix: direct: removeRules() not removing all rules in chain</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-7" date="1569585600">- fix: Revert "ebtables: drop support for broute table"</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-8" date="1573214400">- fix: failure to load modules no longer fatal</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-9" date="1580817600">- fix: firewalld not falling back to interface zone</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-10" date="1587729600">- fix: add logrotate policy
- fix: checkIP6: strip leading/trailing square brackets</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-11" date="1591790400">- feat(service): add RH-Satellite-6-Capsule</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-12" date="1599566400">- fix(zone): cache rule_str for rich rules</changelog>
  <changelog author="Eric Garver &lt;egarver@redhat.com&gt; - 0.6.3-13" date="1618488000">- doc: clarify --set-target values "default" vs "reject"</changelog>
</package>
<package pkgid="4a6a7dcf3f7fc7d6fb2978914746461f80f9640f107bd2561a084529afe2e60f" name="flatpak" arch="src">
  <version epoch="0" ver="1.0.9" rel="10.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1536753600">- Update to 1.0.1 (#1570030)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
</package>
<package pkgid="14ca9e513752bbf64854764dff21cfe709cf3f5cbb0ec8f633513730d8cb11b2" name="flatpak" arch="src">
  <version epoch="0" ver="1.0.9" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-2" date="1536840000">- Update to 1.0.2 (#1570030)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
</package>
<package pkgid="cf70ac6c530f797519c5d2ff0b1354cdc6a755997891204f067a60064ec2d601" name="flatpak" arch="src">
  <version epoch="0" ver="1.0.9" rel="12.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-3" date="1546862400">- Backport patches to improve OCI support (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.0.9-12" date="1635336000">- Fix CVE-2021-41133 (#2012864)</changelog>
</package>
<package pkgid="5ac232ef9757761813f93d90c2bf1d65a1b7b12e979d20d7c09f01d252de925d" name="flatpak" arch="src">
  <version epoch="0" ver="1.0.9" rel="13.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-4" date="1547467200">- Apply the OCI support patch (#1660137)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-5" date="1550059200">- Do not mount /proc in root sandbox (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-6" date="1550232000">- Tweak /proc sandbox patch (#1675435)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.2-7" date="1556539200">- Fix IOCSTI sandbox bypass (#1700652)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-8" date="1568980800">- Update to 1.0.9 (#1753591)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-9" date="1580299200">- Backport OCI fixes from upstream
- Resolves: #1796340</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-10" date="1611662400">- Fix CVE-2021-21261 (#1918771)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 1.0.9-11" date="1616414400">- Fix CVE-2021-21381 (#1938059)</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.0.9-12" date="1635336000">- Fix CVE-2021-41133 (#2012864)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.9-13" date="1717761600">- Fix CVE-2024-32462</changelog>
</package>
<package pkgid="002a072da37dae7d83c1e5960ca6250c835cc0faf30ed97429ec74951c0ee3b5" name="fltk" arch="src">
  <version epoch="0" ver="1.3.4" rel="3.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-7" date="1354190400">- add xcursor BR</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-8" date="1354622400">- fix ABI breakage caused by fltk-1_v4.3.x-cursor.patch (#883026)</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 1.3.0-9" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-10" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.3.0-12" date="1389096000">- Resolves: #1048857 fltk does not build on RHEL7</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-1" date="1487764800">- Re-base to 1.3.4 (+ sync with Fedora)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-2" date="1582200000">- Do not drop linker flags for main library when --use-xxx option is used
  Resolves: bz#1510482</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.4-3" date="1657540800">- Fix segfault if using very large selections
  Resolves: bz#1999819</changelog>
</package>
<package pkgid="085d54ec41d3b68ba23e89b50509feb9b3c9195d9fa00f7e7c9ea30af00639b5" name="foomatic" arch="src">
  <version epoch="0" ver="4.0.9" rel="10.el7_9"/>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-1" date="1363089600">- 4.0.9</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 4.0.9-2" date="1369742400">- remove Artistic test scripts from source tarball (bz 967406)</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-3" date="1370260800">- Obsolete/provide printer-filters package now it has gone (bug #967316).</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 4.0.9-4" date="1386936000">- Correct Obsoletes/Provides printer-filters (bug #1035450)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.0.9-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-7" date="1408622400">- Ship more manpages (bug #948965).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; - 4.0.9-8" date="1409227200">- Put some text into foomatic-preferred-drivers man page.</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0.9-9" date="1558612800">- 1707559 - removal of option in ghostscript caused foomatic-rip to fail</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 4.0.9-10" date="1603800000">- 1891679 - [RHEL 7] foomatic-rip files up /var/spool/tmp with temporary files</changelog>
</package>
<package pkgid="8fbe47e3ddd8b6d6e4ffee54bb24c21d51d6c61cfc87a9c03d903ae6f22e2130" name="freerdp" arch="src">
  <version epoch="0" ver="2.1.1" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-13" date="1507204800">- Fix NTLM on big endian (#1204742)
- Fix colors on big endian (#1308810)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-14" date="1511438400">- Add FIPS mode support (#1363811)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.0.2-15" date="1517400000">- Fix smartcard usage in manpage (#1428041)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-1.rc4" date="1550664000">- Update to 2.0.0-rc4 (#1291254)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-2.rc4" date="1585569600">- Fix SCARD_INSUFFICIENT_BUFFER error (#1765199)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.0.0-4.rc4" date="1589976000">- CVE-2020-11521: Fix out-of-bounds write in planar.c (#1837621)
- CVE-2020-11523: Fix integer overflow in region.c (#1837622)
- CVE-2020-11524: Fix out-of-bounds write in interleaved.c (#1837623)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 2.1.1-2" date="1590408000">- Update to 2.1.1 (#1834286)</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 2.1.1-3" date="1636113600">- Add checks for bitmap and glyph width/heigth values (rhbz#2017951)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-4" date="1636372800">- Refactored RPC gateway parser (rhbz#2017944)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 2:2.2.0-5" date="1636459200">- Update: Refactored RPC gateway parser (rhbz#2017944)
  + fix issues discovered by Covscan</changelog>
</package>
<package pkgid="aa1a519964462eb1476d2a5456baf45cc70f3f4f3b5d94ebe1e984727eec3fcc" name="freetype" arch="src">
  <version epoch="0" ver="2.8" rel="14.el7_9.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-12" date="1458648000">- Define _FILE_OFFSET_BITS=64 to handle inodes higher than or equal to 2^31
- Resolves: #1303268</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-13" date="1487332800">- Don't show path of non-existing libtool file
- Resolves: #1368141</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-14" date="1487592000">- Backport functions for reading signed values from stream
- Resolves: #1381678</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.4.11-15" date="1487592001">- Fix shellcheck warning (coverity)
- Related: #1368141</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 2.8-10" date="1528286400">- Update to 2.8
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-11" date="1528372800">- Preserve API/ABI compatibility for public symbols
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-12" date="1528459200">- Fix loading of avar tables
- Resolves: #1576504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-13" date="1542110400">- Fix definition of constant ft_encoding_gb2312 in freetype.h
- Resolves: #1645218</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14" date="1552305600">- Fix rendering in monochrome mode
- Resolves: #1657479</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.8-14.el7_9.1" date="1604059200">- Test bitmap size earlier for PNGs
- Fix memory leak in pngshim.c
- Resolves: #1891635</changelog>
</package>
<package pkgid="b0a7861832a39168274a7b68fb4d0ddd0ef9e07587fdc676ed9634c644f8a3f8" name="gd" arch="src">
  <version epoch="0" ver="2.0.35" rel="27.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-18" date="1343390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-19" date="1346155200">- Spec file cleanup
- Compile and run test suite during build
- Using chrpath to get rid of --rpath in gd-progs</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-20" date="1356091200">- rebuild against new libjpeg</changelog>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 2.0.35-21" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.35-22" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-23" date="1364212800">- Fix issues found by Coverity</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 2.0.35-24" date="1364212801">- Fix build on aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-25" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.35-26" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 2.0.35-27" date="1604491200">- Fix CVE-2016-5766
- Resolves: #1356813
- Upstream patch: https://github.com/libgd/libgd/commit/aba3db8</changelog>
</package>
<package pkgid="1f9f073478fa680c901c9580c9ef068da3bb628447f9366f25a239789769842a" name="gdm" arch="src">
  <version epoch="1" ver="3.28.2" rel="24.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
</package>
<package pkgid="a3ef6d736a295aee69dbdb0ec44f7ef570f3e65c9430ec3abb467f92ef7ede6d" name="gdm" arch="src">
  <version epoch="1" ver="3.28.2" rel="25.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
</package>
<package pkgid="398105f4f5d485c0ebfdb45ce50feee6229e7f92fc360a3027cd458e90626ed2" name="gdm" arch="src">
  <version epoch="1" ver="3.28.2" rel="26.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-23" date="1588766400">- Support exotic keyboard layouts better
  Related: #1734143</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; 3.28.2-24" date="1600344000">- Fix FD leak on logout
  Resolves: #1877583</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-25" date="1601035200">- Backport some libgdm leak fixes from upstream
  Resolves: #1882821</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.2-26" date="1605182400">- Fix warning during unlock
  Related: #1897063</changelog>
</package>
<package pkgid="898ed2d9334a28263628bebe82bc2445cd51e5358f251c7cc90f94a91c706d6e" name="gegl" arch="src">
  <version epoch="0" ver="0.2.0" rel="19.el7_9.1"/>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 0.2.0-11" date="1372680000">- replace lua-5.2 patch by upstream commit
- fix buffer overflow in and add plausibility checks to ppm-load op
  (CVE-2012-4433)
- fix multi-lib issue in generated documentation</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-12" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.2.0-13" date="1378987200">- Rebuilt for ilmbase soname bump</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 0.2.0-14" date="1385553600">- rebuild (openexr)</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 0.2.0-15" date="1386072000">- rebuild (exiv2)</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 0.2.0-16" date="1386158400">- remove BR: w3m, it's only needed for "make dist"</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.2.0-17" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.2.0-18" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.2.0-19" date="1480593600">- add Requires: dcraw (#1279144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.2.0-19.1" date="1641902400">- fix CVE-2021-45463 (#2035416)</changelog>
</package>
<package pkgid="f23381e5abf2d93505be6ae3e99dffb88478cc4f8c30c60410bf1bea6e274729" name="geoipupdate" arch="src">
  <version epoch="0" ver="2.5.0" rel="2.el7"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.2-1" date="1453464000">- Update to 2.2.2
  - geoipupdate now calls fsync on the database directory after a rename to
    make it durable in the event of a crash
- Update autotools patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.2-2" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.3.1-1" date="1483617600">- Update to 2.3.1
  - geoipupdate now uses TCP keep-alive when compiled with cURL 7.25 or
    greater
  - Previously, on an invalid gzip file, geoipupdate would output binary data
    to stderr; it now displays an appropriate error message
  - Install README, ChangeLog, GeoIP.conf.default etc. into docdir (GH#33)
  - $(sysconfdir) is now created if it doesn't exist (GH#33)
  - The sample config file is now usable (GH#33)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.1-2" date="1486728000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.0-1" date="1495800000">- Update to 2.4.0
  - geoipupdate now checks that the database directory is writable: if it is
    not, it reports the problem and aborts
  - geoipupdate now acquires a lock when starting up to ensure only one
    instance may run at a time: a new option, 'LockFile', exists to set the
    file to use as a lock ('.geoipupdate.lock' in the database directory by
    default)
  - geoipupdate now prints out additional information from the server when a
    download request results in something other than HTTP status 2xx; this
    provides more information when the API does not respond with a database
    file
  - ${datarootdir}/GeoIP is now created on 'make install' (GH#29)
  - Previously, a variable named 'ERROR' was used, which caused issues building
    on Windows (GH#36)
- Drop EL-5 support
  - Drop BuildRoot: and Group: tags
  - Drop explicit buildroot cleaning in %install section
  - Drop explicit %clean section
  - noarch subpackages always available now
  - libcurl-devel always available now</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-2" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-3" date="1501675200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.0-1" date="1509451200">- Update to 2.5.0
  - Replace use of strnlen() due to lack of universal availability (GH#71)
  - Document the 'LockFile' option in the 'GeoIP.conf' man page (GH#64)
  - Remove unused base64 library (GH#68)
  - Add the new configuration option 'PreserveFileTimes'; if set, the
    downloaded files will get the same modification times as their original on
    the server (default is '0') (GH#63)
  - Use the correct types when calling 'curl_easy_setopt()'; this fixes
    warnings generated by libcurl's 'typecheck-gcc.h' (GH#61)
  - In 'GeoIP.conf', the 'UserId' option was renamed to 'AccountID' and the
    'ProductIds' option was renamed to 'EditionIDs'; the old options will
    continue to work, but upgrading to the new names is recommended for
    forward compatibility</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.5.0-1" date="1549627200">- Resolves: #1643470 - Add geoipupdate package
- Initial commit</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 2.5.0-2" date="1682337600">- Resolves: #2188376 - Add support for hashed license keys to geoipupdate</changelog>
</package>
<package pkgid="1225152f4c4883dd24b62e2e1372382c35cf3ad96618e37ca65a44e5751d21ec" name="gfs2-utils" arch="src">
  <version epoch="0" ver="3.1.10" rel="11.el7_9.1"/>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-3" date="1492516800">- libgfs2: Issue one write per rgrp when creating them
- mkfs.gfs2: Fix resource group alignment issue
- mkfs.gfs2: Free unnecessary cached pages, disable readahead
  Resolves: rhbz#1440269</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-4" date="1503057600">- gfs2_edit savemeta: Fix up saving of dinodes/symlinks
  Resolves: rhbz#1482542</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-5" date="1509624000">- Update URL in spec file
  Resolves: rhbz#1501738
- fsck.gfs2: Make -p, -n and -y conflicting options
  Resolves: rhbz#1507091</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-6" date="1512475200">- gfs2_edit: Print offsets of indirect pointers
  Resolves: rhbz#1518938</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-7" date="1523793600">- mkfs.gfs2: Scale down journal size for smaller devices
  Resolves: rhbz#1498068</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-8" date="1529668800">- glocktop: Remove a non-existent flag from the usage string
  Resolves: rhbz#1544944</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-9" date="1536235200">- fsck.gfs2: Don't check fs formats we don't recognise
- libgfs2: Fix pointer cast byte order issue
  Resolves: rhbz#1616389</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-10" date="1588075200">- libgfs2: Use sizeof for 'reserved' fields in ondisk.c
- fsck.gfs2: Disambiguate 'check_data'
- gfs2-utils: Accept a char* instead of a buffer head in gfs2_check_meta
- fsck.gfs2: Disambiguate check_metalist
- fsck.gfs2: Fix segfault in build_and_check_metalist
- fsck.gfs2: Retain context for indirect pointers in -&gt;check_metalist
- fsck.gfs2: Clear bad indirect block pointers when bitmap meets expectations
  Resolves: rhbz#1487726</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-11" date="1591617600">- gfs2_jadd: Handle out-of-space issues
- gfs2_jadd: error handling overhaul
  Resolves: rhbz#1837640</changelog>
  <changelog author="Andrew Price &lt;anprice@redhat.com&gt; - 3.1.10-11.1" date="1601553600">- mkfs.gfs2: Don't use i/o limits hints &lt;4K for block size
  Resolves: rhbz#1853625</changelog>
</package>
<package pkgid="e50c1a8d9ade6bf652575d4ad0be5aac64cc8f3d47759d15cd546a78a7003ace" name="git" arch="src">
  <version epoch="0" ver="1.8.3.1" rel="24.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-15" date="1529409600">- move instaweb to separate git-instaweb subpackage.
	Resolves: #1213059
- move gnome-keyring to a separate git-gnome-keyring subpackage.
	Resolves: #1284081</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
</package>
<package pkgid="06b2904d66aeb9c12c1a585902ebd5471c3d421c8fc14e097de229ecc28b5124" name="git" arch="src">
  <version epoch="0" ver="1.8.3.1" rel="25.el7_9"/>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-16" date="1530532800">- Remove EL-5 settings and old Fedora conditionals.
  Taken from fedora commits 903d8f35ed8ae16bece8ae8033f3d3926cc97595 and
  2c6eff99d7b50b87e8a1fe2e4a0489dfd90659b8.
- Fix builds using '--without docs'
- Change git-instaweb default from lighttpd(not available in rhel7) to
  apache2.
- Add requires for git-{instaweb,gnome-keyring} to pull them, when
  installing git-all.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-17" date="1531224000">- Correctly return an error from fsck on encountering a .gitmodules symlink.
  This was broken in the debian 2.1.x backport and found by covscan.
  Fix the test to catch this.
- Correct a typo in changelog.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-18" date="1531483200">- Use the correct apache module directory in instaweb.
- Apply the docs fixes to instaweb as well.</changelog>
  <changelog author="Sebastian Kisela &lt;skisela@redhat.com&gt; - 1.8.3.1-19" date="1535544000">- Fix httpd modules path to be independent from system architecture.
Upstream commit: 1976311aa285549599e5a451d7ad72b55a2b60e2
Resolves: #1213059</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-20" date="1539950400">- Fix CVE-2018-17456: arbitrary code execution via .gitmodules
  Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-21" date="1576670400">- Fix CVE-2019-1387: remote code execution in recursive clones with nested
  submodules
  Resolves: CVE-2019-1387</changelog>
  <changelog author="Ondrej Pohorelsky &lt;opohorel@redhat.com&gt; - 1.8.3.1-22" date="1586433600">- Crafted URL containing new lines can cause credential leak  
- Resolves: CVE-2020-5260</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.8.3.1-23" date="1590408000">- Prevent crafted URL containing new lines, empty host or lacks a scheme
  to cause credential leak.
  Resolves: CVE-2020-11008</changelog>
  <changelog author="Ond&#x159;ej Poho&#x159;elsk&#xFD; &lt;opohorel@redhat.com&gt; - 1.8.3.1-24" date="1676980800">- Fixes CVE-2022-23521 and CVE-2022-41903
- Resolves: #2162067</changelog>
  <changelog author="Masahiro Matsuya &lt;mmatsuya@redhat.com&gt; - 1.8.3.1-25" date="1684411200">- Fixes CVE-2023-25652 and CVE-2023-29007
- Resolves: #2188354, #2188365</changelog>
</package>
<package pkgid="60ce501be08eb1c73dcbb8e001040863b8731ed52b98892ceaf0a0ff42b2e10b" name="glib2" arch="src">
  <version epoch="0" ver="2.56.1" rel="8.el7"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.56.1-6" date="1586952000">- Backport patches for GDBus auth
  Resolves: #1777221</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-7" date="1589457600">- Backport patch to limit access to files when copying (CVE-2019-12450)
  Resolves: #1722099</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
</package>
<package pkgid="f60e8b2df3937cdc08619db53e7360d92a9ab26e0579eade3c7f1e5a6deee1db" name="glib2" arch="src">
  <version epoch="0" ver="2.56.1" rel="9.el7_9"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2.56.1-8" date="1602676800">- Backport patch to fix leak in g_signal_connect_object
  Resolves: 1887862
  Related: #1717000</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.56.1-9" date="1621857600">- Fix CVE-2021-27219
  Resolves: #1960596</changelog>
</package>
<package pkgid="8b07890c4870449ffecb1676a41d5cd136a4a0bff684c87fa56252dd6e6c7b18" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="322.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
</package>
<package pkgid="e5d76e6c0abcccf2172231456151aa721b207d42004c301caeca0acf422da7f1" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="323.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
</package>
<package pkgid="426c8bbff525428074a753817c4a96f0efddf11e45edc41a0be673c0e4fe2700" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="324.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299200">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
</package>
<package pkgid="b18d184ae30818641e0eed6c963ac1607aa15d4eb6f9b0b114f976d1a8431255" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="325.el7_9"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
</package>
<package pkgid="539507f5106373111ef7f8bf1938fc24027fb07b26d04aa19f86af50a6b33351" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="326.el7_9.3"/>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848000">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-326.1" date="1713268800">- CVE-2024-2961: Out of bounds write in iconv conversion to ISO-2022-CN-EXT (RHEL-31803)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-326.2" date="1714478400">- nscd: Do not use sendfile for the netgroup cache
- nscd: Use-after-free in netgroup cache
- CVE-2021-27645: nscd: double-free in netgroup cache
- CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34263)
- CVE-2024-33600: nscd: null pointer dereferences in netgroup cache
- CVE-2024-33601: nscd: crash on out-of-memory condition
- CVE-2024-33602: nscd: memory corruption with NSS netgroup modules</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-326.3" date="1714651200">- nscd: Fix timeout type in netgroup cache (RHEL-34263)</changelog>
</package>
<package pkgid="4d721471ce631912420dba4c7b2efd313a35aa90170e45b1331fb6b4d4745739" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="326.el7_9"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-318" date="1609848000">- CVE-2019-25013: Fix EUC-KR conversion module defect (#1912543)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-319" date="1609848001">- Revert fix for #1772307 to improve Intel Xeon performance (#1889977)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-320" date="1609848002">- CVE-2020-29573: Harden printf family of functions (#1869380)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-321" date="1609934400">- CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
  sincosl, and tanl function. (#1812119)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-322" date="1609934401">- Enable file-based IFUNC selection on NVMe devices (#1883162)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-323" date="1612526400">- Fix isnanl check in printf. (#1925204)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 2.17-324" date="1616760000">- Move __isnanl_pseudo into its own file and link only into libc (#1927536)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-325" date="1629374400">- Support /etc/sysconfig/strcasecmp-nonascii for enabling non-ASCII case
  conversion in strcasecmp, strncasecmp (#1993930)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-326" date="1647604800">- resolv: Handle DNS transaction ID collisions (#2065058)</changelog>
</package>
<package pkgid="66ceedada61981e87aea5e884e56a8718c026a7917829ed4c8bb924e137c74de" name="glusterfs" arch="src">
  <version epoch="0" ver="6.0" rel="49.1.el7"/>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-41" date="1598356800">- fixes bugs bz#1785714 bz#1851424 bz#1851989 bz#1852736 bz#1853189 bz#1855966</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-42" date="1599048000">- fixes bugs bz#1785714</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-43" date="1599134400">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-44" date="1599134401">- fixes bugs bz#1460657</changelog>
  <changelog author="Deepshikha Khandelwal &lt;dkhandel@redhat.com&gt; - 6.0-45" date="1599652800">- fixes bugs bz#1785714</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-46" date="1603281600">- fixes bugs bz#1873469 bz#1881823</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-47" date="1604577600">- fixes bugs bz#1286171 bz#1821743 bz#1837926</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-48" date="1605009600">- fixes bugs bz#1895301</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49" date="1606305600">- fixes bugs bz#1286171</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-49.1" date="1613736000">- fixes bugs bz#1930561</changelog>
</package>
<package pkgid="b73bdc8a0e4d6392028e5451555e89d7b8f22bee5d5b47bade6e21b9678896b2" name="glusterfs" arch="src">
  <version epoch="0" ver="6.0" rel="61.el7"/>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-54" date="1614772800">- fixes bugs bz#1832306 bz#1911292 bz#1924044</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-55" date="1616155200">- fixes bugs bz#1939372</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56" date="1618401600">- fixes bugs bz#1948547</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.1" date="1619092800">- fixes bugs bz#1927235</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.2" date="1620302400">- fixes bugs bz#1953901</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-57" date="1623153600">- fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 
  bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 
  bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 
  bz#1945143 bz#1946171 bz#1957191 bz#1957641</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-58" date="1623844800">- fixes bugs bz#1945143</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-59" date="1625572800">- fixes bugs bz#1689375</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-60" date="1633953600">- fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 
  bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-61" date="1638187200">- fixes bugs bz#1973566</changelog>
</package>
<package pkgid="5df24f3c27ef65b07293623c927148431277da52cbf75ea3c58a8e611ade065e" name="gnome-initial-setup" arch="src">
  <version epoch="0" ver="3.28.0" rel="2.el7_9.1"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.21.92-1" date="1473768000">- Update to 3.21.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474286400">- Update to 3.22.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.1-1" date="1476273600">- Update to 3.22.1</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-2" date="1489060800">- Honor anaconda's firstboot being disabled
  Resolves: rhbz#1226819</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-3" date="1494417600">- Disable 'software' page as it doesn't make sense in RHEL
  Resolves: rhbz#1446735</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-4" date="1494590400">- Make our password validation similar to anaconda's
  Resolves: rhbz#1447941</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.22.1-5" date="1509019200">- Update session definition files to work with GNOME 3.26
  Resolves: rhbz#1506607</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.28.0-1" date="1528286400">- Update to 3.28.0
- Resolves: #1568175</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.0-2" date="1560168000">- Ensure vendora logo gets used instead of foot
  Resolves: #1711308</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.0-2.1" date="1655812800">- Remove timezone boundaries
  Related: #2098257</changelog>
</package>
<package pkgid="d03976a0db39bfe8fd583ef5bb0225dc5e40e88685c88c88472d88126343fba2" name="gnome-settings-daemon" arch="src">
  <version epoch="0" ver="3.28.1" rel="10.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-9" date="1518609600">+ gnome-settings-daemon-3.26.2-9
- Revert automatic suspend after inactivity, it was rejected
- Related: #1449171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565179200">- Handle rfkill device disappearing
  Resolves: #1691197</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1565265600">- Fallback scale properly without org.gnome.Mutter.DisplayConfig
  Resolves: #1556776</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1567771200">- Add display mapping check specific for the Dell Canvas
  Resolves: #1548320</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-9" date="1603108800">- Keep auto-logout working inside VMs
  Resolves: #1672998
- Never log out automatically from greeter sessions
  Resolves: #1729296</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-10" date="1604059200">- Prevent automatic logout warning in greeter sessions
  Related: #1729296</changelog>
</package>
<package pkgid="6baec44a166a96ab108bf0001f7f37f4d43b32a01af72d13adc0ea10acf4edc8" name="gnome-settings-daemon" arch="src">
  <version epoch="0" ver="3.28.1" rel="11.el7_9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1523534400">- Update to 3.28.1
- Resolves: #1568621</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-2" date="1532606400">- Fix account schema
  Resolves: #1597353</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.1-4" date="1560168000">- Fix busy loop in account plugin
  Resolves: #1600161</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-5" date="1563796800">- Added patch for - keyboard: Enable ibus for OSK purposes
  Resolves: #1632904</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-6" date="1565179200">- Handle rfkill device disappearing
  Resolves: #1691197</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-7" date="1565265600">- Fallback scale properly without org.gnome.Mutter.DisplayConfig
  Resolves: #1556776</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1567771200">- Add display mapping check specific for the Dell Canvas
  Resolves: #1548320</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-9" date="1603108800">- Keep auto-logout working inside VMs
  Resolves: #1672998
- Never log out automatically from greeter sessions
  Resolves: #1729296</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 3.28.1-10" date="1604059200">- Prevent automatic logout warning in greeter sessions
  Related: #1729296</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-11" date="1626436800">- Fix possible crash on gsd-media-keys startup
  Resolves: #1878167
- Ignore permission issues during gsd-housekeeping file deletion
  Resolves: #1909954
- Revert mapping of "XF86RFKill" key
  Resolves: #1888412</changelog>
</package>
<package pkgid="d8efbe5b0d852416302cc9887ca4b862561a7c646a90a72ed3cab5f9f22d68ad" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.28.3" rel="31.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1574251200">- Fix partial lock screen bypass
  Resolves: #1669393</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.coM&gt; - 3.28.3-23" date="1574337600">- Fix "Not Listed?" entry to shows characters instead of bullets
  Resolves: #1772896</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1575374400">- Fix orphaned animation actors
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-30" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
</package>
<package pkgid="bba3e55b0bab2f525f721a7c568c5ad9994c986dbb5f9ce42ed96c4419a0e292" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.28.3" rel="32.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.coM&gt; - 3.28.3-23" date="1574337600">- Fix "Not Listed?" entry to shows characters instead of bullets
  Resolves: #1772896</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1575374400">- Fix orphaned animation actors
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
</package>
<package pkgid="2b6ddfc954914d4349703c8121efd847860a75bdd3a30c00e957845bf6d093ae" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.28.3" rel="33.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1575374400">- Fix orphaned animation actors
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-33" date="1611230400">- Guard against StWidget crash
  Resolves: #1861428</changelog>
</package>
<package pkgid="babbb9a86ebf3c82ff72bbe4c800c73e60861bdd1a1807cc0f48adb6303c3a52" name="gnome-shell" arch="src">
  <version epoch="0" ver="3.28.3" rel="34.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1587124800">- Improve performance under load
  Resolves: #1824871</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-26" date="1587556800">- Fix IM set-content-type handling
  Resolves: #1771841</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-27" date="1590580800">- Avoid warning on early signal emission
  Resolves: #1735700</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-28" date="1592136000">- Fix some (harmless but annoying) JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-29" date="1592827200">- Squash more JS warnings
  Related: #1751121</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-30" date="1593518400">- Wake up lock screen when deactivated programmatically
  Resolves: #1850201</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-31" date="1602676800">- Add leak fixes
  Resolves: #1881995</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-32" date="1605182400">- Fix crasher
  Resolves: #1897063</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-33" date="1611230400">- Guard against StWidget crash
  Resolves: #1861428</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.29.3-34" date="1626264000">- Fix another JS warning
  Resolves: #1860445</changelog>
</package>
<package pkgid="bef331c1ef9ca1e24589c52f8cdd5ff6255c0709ade4e663a6124052a412920f" name="gnome-shell-extensions" arch="src">
  <version epoch="0" ver="3.28.1" rel="16.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-7" date="1553601600">- Add window-grouper extension
  Resolves: #1355845

- Add disable-screenshield extension
  Resolves: #1643501</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
</package>
<package pkgid="ddeeb9e255a8023cf7d7f49997c3f6ef73d1c5fecd68b741d622ecd791a6d63f" name="gnome-shell-extensions" arch="src">
  <version epoch="0" ver="3.28.1" rel="17.el7_9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.28.1-8" date="1565352000">- Add extra-osk-keys extension
  Resolves: #1702417</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-9" date="1566734400">- Make classic mode more classic
  Resolves: #1720286</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-10" date="1569412800">- Fix unwanted appearance of workspace switcher menu
  Resolves: #1752357</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.1-11" date="1575633600">- A couple of fixes to the classic backports
  Resolves: #1778270</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-12" date="1587384000">- Drop faulty patch from backport
  Resolves: #1782102</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-13" date="1590494400">- Adjust dash-to-dock for classic backports
  Resolves: #1805920
- Fix inconsistent state in window-list prefs dialog
  Resolves: #1613835
- Add accessible name to status icons
  Resolves: #1600999</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-14" date="1592395200">- Fix workspace switch in window-list outside GNOME Classic
  Resolves: #1848058</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-15" date="1611144000">- Add workspace tooltips to workspace-indicator/window-list
  Resolves: #1901624</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-16" date="1611662400">- Fix stuck window picker after screen lock
  Resolves: #1904371</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.1-17" date="1618488000">- Override lg foreground color
  Resolves: #1875419</changelog>
</package>
<package pkgid="c458531aef63d46bbc494b03e94f4883cb177baeba3425cdf380a20ae7d85b17" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.87.el7_9.11"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
</package>
<package pkgid="d864bd0cc78f21482fa65abd746d266ceb279ef02c4e9c6585be9ef82180cc9f" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.87.el7_9.14"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.5" date="1614859200">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.el7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.el7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.10" date="1663243200">- Backport the relevant CVE fixes from the 2022-05-24 drop
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.el7.11" date="1668600000">- Bump sbat
- Resolves: CVE-2022-28733</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.02-087.el7.12" date="1706616000">- Font CVE fixes and bump SBAT (CVE-2022-2601)
- Resolves: RHEL-23460</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.02-087.el7.13" date="1706702400">- safemath: add grub_cast for gcc &lt; 5.1
- Related: RHEL-23460</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 2.02-087.el7.14" date="1706788800">- Rebuild for signing
- Related: RHEL-23460</changelog>
</package>
<package pkgid="130f57898ac79c2bb6f9aa2d20d93eea9b00f705dad89cf73fa7edee57cbbf26" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.87.el7_9.2"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.80" date="1553688000">- Rebuild with correct build target for signing
  Resolves: rhbz#1693213</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.81" date="1568376000">- Only make grub2-tools Obsoletes and Provides grub2-tools-efi for x86_64
  Resolves: rhbz#1748019</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.82" date="1584964800">- Prepend prefix when HTTP path is relative
- efi/http: Export {fw,http}_path variables to make them global
  Resolves: rhbz#1616395
- efi/http: Enclose literal IPv6 addresses in square brackets
- efi/net: Allow to specify a port number in addresses
- efi/ip4_config: Improve check to detect literal IPv6 addresses
- efi/net: Print a debug message if parsing the address fails
  Resolves: rhbz#1732765</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.83" date="1595246400">- Fix several CVEs:
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
</package>
<package pkgid="fb2818e41a803573d559e539e03556699ed69c87ce2a2c22848a02ccc9b49237" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.87.el7_9.6"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.84" date="1595764800">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
</package>
<package pkgid="acd2cbb18499b4d6e647cdb0f5732c20a61c39c7860a21accf7a199a823d23d8" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.87.el7_9.7"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.85" date="1595851200">- Couple more late fixes.
  Resolves: CVE-2020-10713
  Resolves: CVE-2020-14308
  Resolves: CVE-2020-14309
  Resolves: CVE-2020-14310
  Resolves: CVE-2020-14311
  Resolves: CVE-2020-15705</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 2.02-0.86" date="1595851201">- Fix a mis-merge
  Related: CVE-2020-15705</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
</package>
<package pkgid="2a29c6784e8f461994252932492fa41e95a9b0c5202f74891e4a1469fa823d4a" name="grub2" arch="src">
  <version epoch="1" ver="2.02" rel="0.87.el7_9.9"/>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87" date="1598270400">- Fix TFTP timeouts when trying to fetch files larger than 65535 KiB
  Resolves: rhbz#1869987</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.1" date="1605700800">- Fix keyboards that report IBM PC AT scan codes
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.2" date="1614340800">- Fix another batch of CVEs
  Resolves: CVE-2020-14372
  Resolves: CVE-2020-25632
  Resolves: CVE-2020-25647
  Resolves: CVE-2020-27749
  Resolves: CVE-2020-27779
  Resolves: CVE-2021-20225
  Resolves: CVE-2021-20233</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.3" date="1614772800">- at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.4" date="1614859200">- add keylayouts and at_keyboard modules to EFI binary
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.5" date="1614859201">- Add the at keyboard patches that weren't included
  Resolves: rhbz#1892240</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.6" date="1614945600">- Fix ppc64le performance issues (diegodo)
  Resolves: rhbz#1759298</changelog>
  <changelog author="Javier Martinez Canillas &lt;javierm@redhat.com&gt; - 2.02-0.87.e7.7" date="1621252800">- Fix boot failures in ppc64le caused by storage race condition (diegodo)
  Resolves: rhbz#1942148</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-0.87.e7.8" date="1646827200">- Fix accidental reboot in grub_exit
- Resolves: #1892860</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 2.02-087.e7.9" date="1648555200">- Bump for signing
- Resolves: #1892860</changelog>
</package>
<package pkgid="39fe2c6c54352fe1fc3c6767ba38a7a35d9071edad529bc608e01f2f2cc4d16d" name="gssproxy" arch="src">
  <version epoch="0" ver="0.7.0" rel="30.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-21" date="1528459200">- Always choose highest requested debug level
- Resolves: #1505741</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-22" date="1544529600">- Add hack to support read-only root
- Resolves: #1542567</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-23" date="1545048000">- Use pthread keys for thread local storage
- Resolves: #1618375</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-24" date="1552910400">- Add a safety timeout to epoll
- Resolves: #1687899</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-25" date="1556625600">- Fix explicit NULL deref on some enctypes
- Resolves: #1699331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-26" date="1556712000">- Avoid uninitialized free when allocating buffers
- Resolves: #1699331</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-27" date="1563796800">- Update docs to reflect actual behavior of krb5_principal
- Resolves: #1553094</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-28" date="1568894400">- Fix double free of popt context when querying version
- Resolves: #1752810</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-29" date="1586174400">- Make syslog of call status configurable
- Resolves: #1373421</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; 0.7.0-30" date="1621252800">- Always free ciphertext data in gp_encrypt_buffer
- Resolves: #1887438</changelog>
</package>
<package pkgid="832cf94db3669437ba026d8994412fd48af8bba42f92b29473f20d1a04254764" name="gstreamer-plugins-bad-free" arch="src">
  <version epoch="0" ver="0.10.23" rel="24.el7_9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 0.10.23-15" date="1362657600">- Remove gmyth plugin</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-16" date="1367496000">- Drop PyXML BR (#914060)</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-17" date="1367496001">- Hack the gtk-doc to remove plugin docs that are not shipped
- Drop mythtv, opencv sources that are no longer buildable</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; 0.10.23-18" date="1367668800">- Move soundtouch-devel BR to outside RHEL conditional, since
  it is available there.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-19" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.10.23-20" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-21" date="1481025600">- Remove insecure NSF plugin
- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-22" date="1481112000">- h264parse: Ensure codec_data has the required size when reading number of SPS
Resolves: rhbz#1400839</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-23" date="1488888000">- Rebuild with hardened flags
Resolves: #1420764</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.10.23-24" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix the build
- Resolves: RHEL-16792</changelog>
</package>
<package pkgid="f26cbb8e5bbc71557943aa56e5f23134a6a818c336a8f2425d42746c1f8b0017" name="gstreamer1-plugins-bad-free" arch="src">
  <version epoch="0" ver="1.10.4" rel="4.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-1" date="1431432000">- Update to 1.4.5
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-2" date="1434974400">- Update ORC backup file
- Resolves: #1174403</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-3" date="1438257600">- Update audiomixer unit test for big endian
- add missing patch
- Resolves: #1226909</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-4" date="1464264000">- rebuild for libdvdnav update
- Resolves: #1340047</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-5" date="1481025600">- vmncdec: Sanity-check width/height before using it
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.5-6" date="1481112000">- Fix h264 and h265 buffer size checks
- Fix mpegts pat parsing and add more size checks
Resolves: rhbz#1400898</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-1" date="1488801600">- Update to 1.10.4
- Remove unbuilt plugins
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-2" date="1489060800">- Disable plugins
- Fix origin
- Resolves: #1429587</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-3" date="1507550400">- Disable wayland sink plugin
- Resolves: #1488978</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.10.4-4" date="1702468800">- Patch CVE-2023-44446: MXF demuxer use-after-free
- Disable gtk-doc to fix build
- Resolves: RHEL-16793</changelog>
</package>
<package pkgid="31f00cbd87952e6012d6e82a71e3a4942870bc7434ce47c887d3c5d1ba881fdc" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.30" rel="6.el7"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.30-6" date="1602244800">- Fix leak on VT switch
  Resolves: #1882574</changelog>
</package>
<package pkgid="478573d32270c393f0b36e8c19fd1060358b5438e1a621d3c151e252282ac4e3" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.30" rel="8.el7_9"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-7" date="1642420800">- Fix treeview a11y refcounting (#1965195)
- Avoid cellarea resize crash (#1962215)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.22.30-8" date="1644926400">- Further treeview a11y refcount fix (#1965195)</changelog>
</package>
<package pkgid="b0596c8261e78b5d194779bae777fed1e9bb0d1e655ea18b78c330facb821fad" name="gupnp" arch="src">
  <version epoch="0" ver="1.0.2" rel="6.el7_9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.0-2" date="1361448000">- Obsolete gupnp-vala</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.1-1" date="1362484800">- 0.20.1 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.1.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.2-1" date="1365854400">- 0.20.2 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.2.news</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 0.20.3-1" date="1369915200">- 0.20.3 release
- http://ftp.gnome.org/pub/GNOME/sources/gupnp/0.20/gupnp-0.20.3.news</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.20.3-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.20.13-1" date="1433160000">- Update to 0.20.13 and re-enable vala bindings
Resolves: #1225451</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.1-1" date="1488456000">+ gupnp-1.0.1-1
- Rebase to 1.0.1
Resolves: #1386985</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.0.2-5" date="1528113600">+ Update to latest upstream version
- Resolves: #1569980</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.0.2-6" date="1623153600">+ gupnp-1.0.3-3
- Fix DNS rebind issue
- Resolves: #1964706</changelog>
</package>
<package pkgid="a523e750bfdedbe8fd371c70e1d5671a731f4b7e22b7657de85e70db71a8ebaf" name="gvfs" arch="src">
  <version epoch="0" ver="1.36.2" rel="5.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-1" date="1490702400">- Update to 1.30.4
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-2" date="1490702401">- Add explicit gvfs-client requirements
- Resolves: #1386993</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
</package>
<package pkgid="f5400edfcdb1b4a7f2360e3079353e129d322022e66427d3527bbd264f8b66fd" name="gvfs" arch="src">
  <version epoch="0" ver="1.36.2" rel="7.el7_9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-3" date="1492516800">- Handle SecurID password prompt
- Resolves: #1440256</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-4" date="1507723200">- Rebuild against newer libgphoto2 (#1500216)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.30.4-5" date="1510315200">- Fix network backend crashes when creating proxy failed (#1465302)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.36.2-1" date="1525780800">- Update to 1.36.2
- Resolves: #1569268</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-2" date="1548936000">- Prevent spawning new daemons if outgoing operation exists (#1632960)
- CVE-2019-3827: Prevent access if any authentication agent isn't available (#1673887)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-3" date="1550232000">- Force NT1 protocol version for workgroup support (#1619719)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-4" date="1587556800">- Fix udisks2 volume monitor crashes when stopping drive (rhbz#1758237)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-5" date="1625227200">- Fix udisks2 volume monitor leaks (rhbz#1944813)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-6" date="1655208000">- Use O_RDWR to fix fstat when writing on SMB share (#2093816)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.36.2-7" date="1655985600">- Fix unapplied patch (#2093816)</changelog>
</package>
<package pkgid="3a6e9f1a7c0b49bc28b42cb4c10e0488a1cd7b7efd24be14ce63a704f998224a" name="gzip" arch="src">
  <version epoch="0" ver="1.5" rel="11.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.5-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Drake &lt;dsd@laptop.org&gt; - 1.5-3" date="1352808000">- Fix "gzip --rsyncable" functionality by removing a spurious blank line from
  the patch.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.5-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-5" date="1384516800">- fix issue with nonblocking open for PAR and OFL file
  Resolves: rhbz#1028052</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.5-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-8" date="1426507200">- Gzip overwrite existing files when user choose "no" on yes/no question.
  It's due to wrong dupicit declaration of yesno() function in gzip.h
  which is compiled wrong with -O2 option.
  Resolves: rhbz#1201689</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.5-9" date="1488283200">- fix zfoce
  Resolves: #1382054</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5-10" date="1505131200">- doc change: missing grep options are now mentioned in the zgrep 
  man pages/help message
  Resolves: #1437002</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5-11" date="1650369600">- fix an arbitrary-file-write vulnerability in zgrep
Resolves: CVE-2022-1271</changelog>
</package>
<package pkgid="9ef92a25c77d15fd81d006015f7fa63f0fea38e7997c8991c4a7d4176e87d313" name="haproxy" arch="src">
  <version epoch="0" ver="1.5.18" rel="9.el7_9.1"/>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-1" date="1465992000">- Update to stable release 1.5.18 (#1344012)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-2" date="1466078400">- Add TARGET to install-bin for haproxy-systemd-wrapper</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-3" date="1466510400">- Fix TCP user timeout patch for 1.5.18 release</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-4" date="1479297600">- Return correct exit codes from systemd-wrapper (#1391990)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-5" date="1489665600">- Use soft-static allocation for haproxy UID/GID (#1386130)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-6" date="1493640000">- Use KillMode=mixed in systemd service file (#1444709)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-7" date="1512043200">- Rebuild with openssl-1.0.2k (#1509139)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-8" date="1532520000">- Build with USE_GETADDRINFO option (#1598491)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-9" date="1551268800">- Detect down servers with mutliple tcp-check connect rules (#1677420)</changelog>
  <changelog author="Ryan O'Hara &lt;rohara@redhat.com&gt; - 1.5.18-9.1" date="1620820800">- Fix health checks for flapping servers (#1947750)</changelog>
</package>
<package pkgid="4a6ecbd385bf0618c537be7e0f6db61cf726a8a128a719c3dcdac45b8454b18a" name="hivex" arch="src">
  <version epoch="0" ver="1.3.10" rel="6.11.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.2" date="1407499200">- Resolves: rhbz#1125544</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
</package>
<package pkgid="7c5e3885d08d811c94a3e21446c54cb673025b0247ce430161cfc0006fad1aa3" name="hivex" arch="src">
  <version epoch="0" ver="1.3.10" rel="6.12.el7_9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.3" date="1411560000">- Fix: hivexml generates "Argument list too long" error.
  resolves: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.4" date="1415880000">- Fix: hivex missing checks for small/truncated files
  resolves: rhbz#1158992</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.6" date="1416225600">- Fix: typo in man page
  resolves: rhbz#1099286</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.7" date="1416225601">- Fix: "Argument list too long" when using virt-v2v on Windows guest
  with French copy of Citrix installed
  related: rhbz#1145056</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-5.8" date="1487332800">- Tolerate corruption in some hives
  resolves: rhbz#1423436
- Switch to using git to manage patches.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.8" date="1506081600">- Rebuild for OCaml 4.05
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.9" date="1507636800">- Enable OCaml subpackage on s390x.
  resolves: rhbz#1447983</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.10" date="1589889600">- Increase limits on number of subkeys etc.
  resolves: rhbz#1822889</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.11" date="1618574400">- Bounds check for block exceeding page length (CVE-2021-3504)
  resolves: rhbz#1950500</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.3.10-6.12" date="1627905600">- Limit recursion in ri-records (CVE-2021-3622)
  resolves: rhbz#1976193</changelog>
</package>
<package pkgid="d7a874a64a06cddca1c34c2e15439f3ba06cbcd1b7e8a22b47f98c2f86d822c8" name="hsqldb" arch="src">
  <version epoch="1" ver="1.8.1.3" rel="15.el7_9"/>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-6" date="1331208000">- Fixed symlink</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:1.8.1.3-7" date="1333713600">- Switch to servlet 3.0 by default.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-8" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 1:1.8.1.3-9" date="1345809600">- Switched from SysV to systemd
- Spec rearrangements</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.8.1.3-10" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-11" date="1368792000">- Fix incorrect permissions on systemd unit file
- Resolves: rhbz#963911</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-12" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.8.1.3-13" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-14" date="1444305600">- Remove dependency on initscripts
- Add After=network.target to systemd service
- Resolves: rhbz#1283893, rhbz#1269717</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.8.1.3-15" date="1667822400">- Fix possible remote code execution vulnerability
- Resolves: CVE-2022-41853</changelog>
</package>
<package pkgid="a2685ff9b2aea02e1a9db690a9a29e3c2557f31493335fada0922e0731a45a52" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="97.el7_9.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582400">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
</package>
<package pkgid="00bcbff8aa2d9b280ce52c81e80ab1cdf17a588d8f96725f3d5963a517adc33d" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="97.el7_9.2"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
</package>
<package pkgid="3df30811595dee2b748354bbc71465daaed777bc1adf6d1b403e0a300cac3787" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="97.el7_9.4"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt;" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
</package>
<package pkgid="5131a8af599100f3d0f3137fdcc10adff4875814a44d7df811b3bc450791ea4b" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="97.el7_9.5"/>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
</package>
<package pkgid="ed582991988038f89a95c3f553ccd2e9a9e5f220f09b05a363607fb31b50b93a" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="97.el7_9"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-87" date="1529582400">- Resolves: #1458364 - RMM list corruption in ldap module results in server hang</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-88" date="1529582401">- Resolves: #1527295 - httpd with worker/event mpm segfaults after multiple
  SIGUSR1</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-89" date="1552651200">- fix per-request leak of bucket brigade structure (#1583218)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-90" date="1559995200">- Resolves: #1566317 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
  in mod_auth_digest
- Resolves: #1696141 - CVE-2019-0217 httpd: mod_auth_digest: access control
  bypass due to race condition
- Resolves: #1696096 - CVE-2019-0220 httpd: URL normalization inconsistency</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-91" date="1564574400">- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
  mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
  failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
  directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 2.4.6-92" date="1566475200">- htpasswd: add SHA-2 crypt() support (#1486889)</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
</package>
<package pkgid="af72e39218ee37d78ff616388813f49cb6ee47ef8c5c55a85420b60ed4c3f7bb" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="98.el7_9.6"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-93" date="1570536000">- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
  expiry time</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
</package>
<package pkgid="50b7e00b5ca81a8c46642c52b5811a2b890a69251596dfb6d9317238c8cd4c2b" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="98.el7_9.7"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-94" date="1585224000">- Resolves: #1565491 - CVE-2017-15715 httpd: &lt;FilesMatch&gt; bypass with a trailing
  newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
  shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
  mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in 
  mod_session can allow a remote user to modify session data for CGI applications</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
</package>
<package pkgid="420af0f061c53f09b7e42e9510fbeec07d3eed3054738eea0b489814f8f31cef" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="99.el7_9.1"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-95" date="1587124800">- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
  value</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97" date="1602072000">- Resolves: #1852350 - httpd/mod_proxy_http/mod_ssl aborted when sending
  a client cert to backend server
- Resolves: #1785100 - mod_cgid takes CGIDScriptTimeout x 2 seconds for timeout
- Resolves: #1862499 - Intermittent Segfault in Apache httpd due to pool
  concurrency issues</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.1" date="1633608000">- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
  request uri-path containing "unix:"</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.2" date="1635163200">- Resolves: #2015694 - proxy rewrite to unix socket fails with CVE-2021-40438 fix</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.3" date="1641816000">- Resolves: #2035058 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
  when parsing multipart content</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.4" date="1641816001">- Resolves: #2031072 - CVE-2021-34798 httpd: NULL pointer dereference via
  malformed requests
- Resolves: #2031074 - CVE-2021-39275 httpd: out-of-bounds write in
  ap_escape_quotes() via malicious input
- Resolves: #1969226 - CVE-2021-26691 httpd: Heap overflow in mod_session</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.5" date="1647950400">- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
  vulnerability in Apache HTTP Server 2.4.52 and earlier</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.6" date="1670414400">- Resolves: #2101997 - HEAD request with a 404 and custom ErrorPage causes
  corrupt and mixed-up responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-97.7" date="1679400000">- Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with
  mod_rewrite and mod_proxy</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-99.1" date="1682596800">- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690</changelog>
</package>
<package pkgid="bf6e3b56da4e1b67a8290f160735adac0c37cfd7cbed8b69b6edfaa90d059fb7" name="ibus" arch="src">
  <version epoch="0" ver="1.5.17" rel="12.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-3" date="1553256000">- Resolves: #1671187 - ibus.conf does not set QT_IM_MODULE with qt5 ibus module</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-4" date="1556107200">- Resolves: #1693926 - Commit hangul preedit with mouse</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
</package>
<package pkgid="28bb592e0a92d9b00776c65269153f7eb85a5f82732bfa2b200ece5daded8939" name="ibus" arch="src">
  <version epoch="0" ver="1.5.17" rel="14.el7_9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-5" date="1557230400">- Resolves: #1693926 - Commit hangul preedit with clicking out of URL bar</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-6" date="1565092800">- Resolves: #1686913 - ibus-daemon always will exits with parent's death</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-7" date="1565352000">- Resolves: #1686913 - Fix rpmdiff inspection in ko.po</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-8" date="1568980800">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-9" date="1570190400">- Resolves: #1750835 - Delete duplicated g_dbus_generate_guid()</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-10" date="1579003200">- Resolves: #1777369 - Revert ibus CVE fix because of Qt5 regression</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-11" date="1587038400">- Resolves: #1750835 - Fix CVE-2019-14822 missing authorization allows</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.5.17-12" date="1602676800">- Resolves: #1882009 - Fix GVariant leaks</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-13" date="1689249600">- Resolves: #2175871 - Avoid to hang the process with SIGUSR1 signal</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.17-14" date="1689336000">- Resolves: #2175871 - Update ibus-2175871-x11-Xephyr-query.patch</changelog>
</package>
<package pkgid="269ab6984ded2dd952d07f9a45c81a8b8ecc37c72d822a49a353d7a2c3c1bbb7" name="icedtea-web" arch="src">
  <version epoch="0" ver="1.7.1" rel="4.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-1" date="1454500800">- updated to 1.6.2
- fixed also rhbz#1303437 - package owns /etc/bash_completion.d but it should not own it 
- generated maven metadata (isntalled but not used. %add_maven_depmap need tobe fixed)
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-3" date="1468411200">- added --family to make it part of javas alternatives alignment
- java-javaver-openjdk collected into preffered_java 
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.6.2-4" date="1468497600">- fixed typo in provides
- Resolves: rhbz#1299537</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-1" date="1508328000">- updated to itw 1.7 and sync from fedora
- added forgotten slaves of itweb-settings policyeditor
- Own %{_datadir}/%{name} dir
- Mark non-English man pages with %lang
- Install COPYING as %license
- last three by Ville Skytta &lt;ville.skytta@iki.fi&gt; via 1481270
- for sake of rpms added patch0, bashCompDirHardcodedAgain.patch to hardcode bashcompletion dir
- removed maven macros in favour of manual handling (bug)
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-2" date="1508328001">- gathered various patches from usptream
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7-3" date="1509710400">- javaws specific manpage renmed from -suffix to .suffix
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-1" date="1513598400">* bump to 1.7.1
- Resolves: rhbz#1475411</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-2" date="1563451200">- added patch1, patch4 and patch11 to fix CVE-2019-10182
- added patch2 to fix CVE-2019-10181
- added patch3 and patch33 to fix CVE-2019-10185
- Resolves: rhbz#1724958 
- Resolves: rhbz#1725928 
- Resolves: rhbz#1724989</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-3" date="1563451201">- Added Patch5, testTuning.patch to make tests pass inclean envirnment
- Resolves: rhbz#1724958</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; 1.7.1-4" date="1606392000">- Added Patch6, altjava.patch to make usage of alt-java prefferd over java
- Resolves: rhbz#1901639</changelog>
</package>
<package pkgid="365bfd43e4caed4c4ec2e6a7560c9d5b68c1d644e400cff0b3e6f2dd430689ea" name="initscripts" arch="src">
  <version epoch="0" ver="9.49.53" rel="1.el7_9.1"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.45-1" date="1532433600">- network: parsing of /proc/mounts returned (bug #1572659)
- netconsole: LSB header added (bug #1508489)
- ifdown-eth: no longer needed 'pidof -x dhclient' condition removed (bug #1559384)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.46-1" date="1535112000">- ifup-post: fix incorrect condition for RESOLV_MODS (bug #1610411)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.47-1" date="1553860800">- Fix file permissions for /var/log/dmesg</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.48-1" date="1565092800">- network: don't fail with IFDOWN_ON_SHUTDOWN (bug #1693977)
- Configure autorelabel service to output to journal and to console if set (bug #1634661)
- Fix changelog typo</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.49-1" date="1566216000">- ifup-eth: Check that device name is set (bug #1741830)
- Add option for IPv6 GRE tunnel (bug #1691552)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.50-1" date="1583928000">- Wait for scope link addresses as well as for scope global addresses - ipv6 (bug #1773798)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.51-1" date="1584532800">- Fix inline comment - (bug #1773798)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.con&gt; - 9.49.52-1" date="1589803200">- ifup-eth: Switch to bc utility, which supports floating point computations (bug #1609687)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.53-1" date="1590148800">- rwtab: Add support for chrony (bug #1838260)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 9.49.53-1.el7_9.1" date="1602590400">- rwtab: Allow updating mlocate.db (bug #1880095)</changelog>
</package>
<package pkgid="417eba8811abe23a9596ebbdb4dc0539ddbf1d05aa2a8566bb4138540f27d27c" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7_9.10"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
</package>
<package pkgid="e516cf0bbb2161e655d201992e1a847bdbce2d0cd7369c2c231e5f17cb8f3dbb" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7_9.11"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
</package>
<package pkgid="2570fe5203715a933e1ea357b7710de2d1b00a3318f6ad5712ee563fcbb333c3" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7_9.12"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
</package>
<package pkgid="5615c15f98c5ff63b9a12e5d65cfc8610836708da855ad20e8a45d666c05a098" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7_9.14"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
</package>
<package pkgid="de3ccb2c4bfc3ce0da0fc769c48572f496d7490c4d881dc3b906e88a1de2aded" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7_9.15"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
</package>
<package pkgid="8818b2f82a016580b679a8485e6431bd9c9e546886d1f6b629562c3b8656acba" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7_9.16"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
</package>
<package pkgid="2b6ec73487c5192ae6ec1e8a3c049f39c73b8f430230d7035af19b071bdb38e8" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7_9.17"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.10" date="1638446400">- Resolves: 2025848 - RHEL 8.6 IPA Replica Failed to configure PKINIT setup against a RHEL 7.9 IPA server 
  - Fix cert_request for KDC cert
- Resolves: 2021444 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
  - SMB: switch IPA domain controller role</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.11" date="1652184000">- Resolves: 2082272 - [RFE] Require confirmation to change "Default host group" in IdM automember rules
  - WebUI: Add confirmation dialog for changing default user/host group</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.12" date="1664971200">- Resolves: 2084223 - 'ipa idview-show idviewname' &amp; IPA WebUI takes longer time to return the results
  - idviews: use cached ipaOriginalUid value when resolving ID override
- Resolves: 2124369 - OTP token sync always returns OK even with random numbers
  - ipa otptoken-sync: return error when sync fails
  - ipatests: add negative test for otptoken-sync
  - ipatests: python2 does not support f-strings
  - Fix otptoken_sync plugin</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.13" date="1679313600">- Resolves: 2148249 - ipa-client-install does not maintain server affinity during installation
  - Defer creating the final krb5.conf on clients
  - Move client certificate request after krb5.conf is created
  - server install: remove error log about missing bkup file</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.14" date="1679572800">- Resolves: 2180919 [rhel-7] Sequence processing failures for group_add using server context
  - ipaserver: deepcopy objectclasses list from IPA config</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.15" date="1691064000">- Resolves: 2209636 libipa_otp_lasttoken plugin memory leak</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.16" date="1700568000">- Resolves: RHEL-12570 ipa: Invalid CSRF protection</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 4.6.8-5.el7_9.17" date="1717502400">- Resolves: RHEL-29926 ipa: user can obtain a hash of the passwords of all domain users and perform offline brute force</changelog>
</package>
<package pkgid="f3de06115d1d52fd7f9e74a72961869af06098f6114dc83221bc8e0f334e2a05" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7_9.4"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-9.el7" date="1572436800">- Resolves: #1762317 - ipa-backup command is failing on rhel-7.8
  -  ipa-backup: fix python2 issue with os.mkdir</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
</package>
<package pkgid="90dc7ce47b105aa6905ea37ce6ccc158c4b57925fb8db2a8470a0eeba68b8c65" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7_9.5"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-10.el7" date="1574769600">- Resolves: #1728123 - EMBARGOED CVE-2019-10195 ipa: FreeIPA: batch API logging user passwords to /var/log/httpd/error_log [rhel-7]
  - CVE-2019-10195: Don't log passwords embedded in commands in calls using batch
- Resolves: #1773550 - IPA upgrade fails for latest ipa package when adtrust is installed
  - Do not run trust upgrade code if master lacks Samba bindings
- Resolves: #1767302 - EMBARGOED CVE-2019-14867 ipa: Denial of service in IPA server due to wrong use of ber_scanf() [rhel-7.8]
  - Make sure to have storage space for tag</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
</package>
<package pkgid="30981192ad0c162874e6cc5ebf18e652818cf92952c239ff60c663ba076bd619" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7_9.6"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-11.el7" date="1575460800">- Resolves: #1778777 - After upgrade AD Trust Agents were removed from LDAP
  - trust upgrade: ensure that host is member of adtrust agents</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
</package>
<package pkgid="5f02a0e9344dad4f22cc01a3c538005a9f81d9bbcf44556144f4dedf8d2a83a6" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7_9.7"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.6-12.el7" date="1585051200">- Resolves: #1754902 - Running ipa-server-install fails when RHEL 7.7 packages are installed on RHEL 7.6
- Resolves: #1404770 - ID Views: do not allow custom Views for the masters
  - idviews: prevent applying to a master
- Resolves: #1801791 - Compatibility Schema difference in functionality for systems following RHEL 7.5 -&gt; 7.6 upgrade path as opposed to new RHEL 7.6 systems
  - install/updates: move external members past schema compat update
- Resolves: #1795890 - ipa-pkinit-manage enable fails on replica if it doesn't host the CA
  - pkinit setup: fix regression on master install
  - pkinit enable: use local dogtag only if host has CA
- Resolves: #1788907 - Renewed certs are not picked up by IPA CAs
  - Allow an empty cookie in dogtag-ipa-ca-renew-agent-submit
- Resolves: #1780548 - Man page ipa-cacert-manage does not display correctly on RHEL
  - ipa-cacert-manage man page: fix indentation
- Resolves: #1782587 - add "systemctl restart sssd" to warning message when adding trust agents to replicas
  - adtrust.py: mention restarting sssd when adding trust agents
- Resolves: #1771356 - Default client configuration breaks ssh in FIPS mode
  - Use default ssh host key algorithms
- Resolves: #1755535 - ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client
  - smartcard: make the ipa-advise script compatible with authselect/authconfig
- Resolves: #1758406 - KRA authentication fails when IPA CA has custom Subject DN
  - upgrade: fix ipakra people entry 'description' attribute
  - krainstance: set correct issuer DN in uid=ipakra entry
- Resolves: #1756568 - ipa-server-certinstall man page does not match built-in help
  - ipa-server-certinstall manpage: add missing options
- Resolves: #1206690 - UPG not being enforced properly
  - ipa user_add: do not check group if UPG is disabled
- Resolves: #1811982 - CVE-2018-14042 ipa: bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip.
- Resolves: #1811978 - CVE-2018-14040 ipa: bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute
- Resolves: #1811972 - CVE-2016-10735 ipa: bootstrap: XSS in the data-target attribute
- Resolves: #1811969 -CVE-2018-20676 ipa: bootstrap: XSS in the tooltip data-viewport attribute
- Resolves: #1811966 - CVE-2018-20677 ipa: bootstrap: XSS in the affix configuration target property
- Resolves: #1811962 - CVE-2019-8331 ipa: bootstrap: XSS in the tooltip or popover data-template attribute
  - Web UI: Upgrade Bootstrap version 3.3.7 -&gt; 3.4.1
- Resolves: #1769791 - Invisible part of notification area in Web UI intercepts clicks of some page elements
  - WebUI: Fix notification area layout
- Resolves: #1545755 - ipa-replica-prepare should not update pki admin password
  - Fix indentation levels
  - ipa-pwd-extop: use SLAPI_BIND_TARGET_SDN
  - ipa-pwd-extop: don't check password policy for non-Kerberos account set by DM or a passsync manager
  - Don't save password history on non-Kerberos accounts</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
</package>
<package pkgid="c9580b6da1f606571cd5b97033d2b994b3afdcabd83edfd5fe27ae467d7a88d7" name="ipa" arch="src">
  <version epoch="0" ver="4.6.8" rel="5.el7_9.9"/>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-1.el7" date="1585828800">- Resolves: #1819725 - Rebase IPA to latest 4.6.x version
- Resolves: #1817927 - host-add --password logs cleartext userpassword to Apache error log
- Resolves: #1817923 - IPA upgrade is failing with error "Failed to get request: bus, object_path and dbus_interface must not be None."
- Resolves: #1817922 - covscan memory leaks report
- Resolves: #1817919 - Enable compat tree to provide information about AD users and groups on trust agents
- Resolves: #1817918 - Secure tomcat AJP connector
- Resolves: #1817886 - ipa group-add-member: prevent adding IPA objects as external members
- Resolves: #1788718 - ipa-server-install incorrectly setting slew mode (-x) when setting up ntpd</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-2.el7" date="1586952000">- Resolves: #1802408 CVE-2020-1722 ipa: No password length restriction leads to denial of service
  - Add interactive prompt for the LDAP bind password to ipa-getkeytab
  - CVE-2020-1722: prevent use of too long passwords</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-3.el7" date="1589284800">- Resolves: #1834385 Man page syntax issue detected by rpminspect
  - Man pages: fix syntax issues
- Resolves: #1829787 ipa service-del deletes the required principal when specified in lower/upper case
  - Make check_required_principal() case-insensitive
- Resolves: #1825829 ipa-advise on a RHEL7 IdM server generate a configuration script for client having hardcoded python3
  - ipa-advise: fallback to /usr/libexec/platform-python if python3 not found
- Resolves: #1812020 CVE-2015-9251 ipa: js-jquery: Cross-site scripting via cross-domain ajax requests
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1
- Resolves: #1713487 CVE-2019-11358 ipa: js-jquery: prototype pollution in object's prototype leading to denial of service or remote code execution or property injection
  - Web UI: Upgrade jQuery version 2.0.3 -&gt; 3.4.1</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-4.el7" date="1591358400">- Resolves: #1842950 ipa-adtrust-install fails when replica is offline
  - ipa-adtrust-install: avoid failure when replica is offline
- Resolves: #1831856 CVE-2020-11022 ipa: jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method
  - WebUI: Apply jQuery patch to fix htmlPrefilter issue</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7" date="1592481600">- Resolves: #1826659 IPA: Ldap authentication failure due to Kerberos principal expiration UTC timestamp
  -  ipa-pwd-extop: use timegm() instead of mktime() to preserve timezone offset</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.4" date="1611921600">- Resolves: #1897253 IPA WebUI inaccessible after upgrading to RHEL 8.3.- idoverride-memberof.js missing
  - wgi/plugins.py: ignore empty plugin directories
- Resolves: #1895197 improve IPA PKI susbsystem detection by other means than a directory presence, use pki-server subsystem-find
  - Improve PKI subsystem detection
  - ipatests: add test for PKI subsystem detection
  - ipatest: fix test_upgrade.py::TestUpgrade::()::test_kra_detection
- Resolves: #1892793 Authentication and login times are over several seconds due to unindexed ipaExternalMember
  - Add more indices
- Resolves: #1884819 IdM Web UI shows users as disabled
  - fix cert-find errors in CA-less deployment
- Resolves: #1863619 CA-less install does not set required permissions on KDC certificate
  - CAless installation: set the perms on KDC cert file
  - ipatests: check KDC cert permissions in CA less install
- Resolves: #1859248 CVE-2020-11023 ipa: jquery: Passing HTML containing &lt;option&gt; elements to manipulation methods could result in untrusted code execution
  - WebUI: Fix jQuery DOM manipulation issues
- Resolves: #1846349 cannot issue certs with multiple IP addresses corresponding to different hosts
  - fix iPAddress cert issuance for &gt;1 host/service</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.5" date="1617710400">- Resolves: #1931405 krb5kdc crash - Segmentation fault in ldap_first_entry().
  - ipa-kdb: fix compiler warnings
  - ipa-kdb: add missing prototypes
  - ipa-kdb: reformat ipa_kdb_certauth
  - ipa-kdb: mark test functions as static
  - ipa-kdb: do not use OpenLDAP functions with NULL LDAP context
- Resolves: #1835741 krb5kdc crashing on ipa server
- Resolves: #1929372 krb5kdc is crashing intermittently on IPA server.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.6" date="1620734400">- Resolves: #1959349 - Need to bump pki + ds version</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.7" date="1624363200">- Resolves: #1956550 - IPA server installation fails when cert contains non-ASCII character
  - CA less installation: non ASCII chars in CA subject
  - ipatests: use non-ascii chars in CA-less install
- Resolves: #1974328 - Revise PKINIT upgrade code
  - Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.6.8-5.el7_9.9" date="1631102400">- Resolves: #2000261 - extdom: LDAP_INVALID_SYNTAX returned instead of LDAP_NO_SUCH_OBJECT
  - extdom: return LDAP_NO_SUCH_OBJECT if domains differ</changelog>
</package>
<package pkgid="fe8de01933bf8450028387f6797071fedba52605badfd19bc14dfff8c835d548" name="iperf3" arch="src">
  <version epoch="0" ver="3.1.7" rel="3.el7_9"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.6-1" date="1488369600">- Resolves: #913329 - [RFE] include iperf3 in RHEL 7
- initial build</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.7-1" date="1489060800">- Related: #913329 - [RFE] include iperf3 in RHEL 7
                   - adding latest version before including iperf3 in RHEL-7</changelog>
  <changelog author="Michal Ruprich - 3.1.7-2" date="1489147200">- Related: #913329 - [RFE] include iperf3 in RHEL 7
                   - adding requires to spec file for devel package</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 3.1.7-3" date="1690286400">- Resolves: #2224558 - iperf3: memory allocation hazard and crash
  (CVE-2023-38403)</changelog>
</package>
<package pkgid="05a9d366b816195da7f91b63a85f3cab8ed87df46ecfd28e90c78acd1a78d897" name="ipmitool" arch="src">
  <version epoch="0" ver="1.8.18" rel="10.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-1" date="1486036800">- New upstream release 1.8.18 (#1398658)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
</package>
<package pkgid="a7bc218d00a2fd540da16b49e4abb537455bb87e36f065b22b4c0c0f5a7dc6ac" name="ipmitool" arch="src">
  <version epoch="0" ver="1.8.18" rel="11.el7_9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-2" date="1486987200">- Fix issue in file sources</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-3" date="1487246400">- Fix issues with warning: dereferencing type-punned pointer 
  will break strict-aliasing rules from RPMDiff</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-4" date="1487678400">- Fix RPMDiff issues and rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-5" date="1491825600">- Remove RPMDiff fix file (#1439269) related to #1398658</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-6" date="1507032000">- Hide unrequested verbose output (#1483163)
- Fix doc for check input values (#1495098)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0:1.8.18-7" date="1517918400">- Remove debug prints shown without -v option (#1483163)</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-8" date="1583236800">- Backport fix for CVE-2020-5208</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 0:1.8.18-9" date="1583323200">- Disable -fstrict-aliasing (RPMDiff issue)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0:1.8.18-10" date="1639742400">- Protect against negative values to memmove that caused
  "ipmitool sol activate" to crash against an IBM DataPower appliance
  (#1951480) and IP-131 Dayton blades in a SGI ICE-X (#2025519)
  Cherry-picked from upstream PR#78.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.18-11" date="1691582400">- Add upstream ipmievd patch to check received msg id against expectation
  Fixes problem where SEL response is not recognized correctly
  when SEL request times out
  Resolves: rhbz#2224569</changelog>
</package>
<package pkgid="7b646f95389da27f4de6f27d59ac11b1aa40b26bcd63729239b32be76f0a27ed" name="iscsi-initiator-utils" arch="src">
  <version epoch="0" ver="6.2.0.874" rel="20.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-11" date="1551873600">- 1649401, 1649413 iscsiuio updates</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
</package>
<package pkgid="a523c74a678b8de4ea580f9f68fda49a12472fce426f821698f234049db85446" name="iscsi-initiator-utils" arch="src">
  <version epoch="0" ver="6.2.0.874" rel="21.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-12" date="1566302400">- 1389071 handle newer ISCSI_ERR_NOP_TIMEDOUT code from the kernel
- 1624670 Login negotiation failed due to CHAP_N values do not match
          (rec update race condition)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
</package>
<package pkgid="933faa243c11259f8506b9b0458211d34697fe0f7a2498bc060ac93cad68b6f8" name="iscsi-initiator-utils" arch="src">
  <version epoch="0" ver="6.2.0.874" rel="22.el7_9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-13" date="1566561600">- 1724579 iscsiuio update, allow processing requests in DHCP failure condition</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-14" date="1568203200">- 1598647 update boot gateway information during sync_session</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-15" date="1571227200">- 1396651 Update service files, support sd_notify instead of pid files, stop forking</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-16" date="1571313600">- upstream iscsiuio/configure.ac changes were breaking build hardening</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-17" date="1572264000">- 1518367 boot from iSCSI not establishing all sessions persistently
- 1667965 A manual restart of iscsi.service modifies records node.startup value</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-18" date="1589284800">- 1809945 backport new CHAP modes for FIPS environments (SHA1 and SHA256 only, no SHA3 in OpenSSL-1.0.2)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-19" date="1593691200">- 1851250 fix libiscsi for libcrypto requirement</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-20" date="1601467200">- 1881245 iscsiadm regression when discovering many targets at once</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-21" date="1628510400">- 1989972 set proper attr in rpm db for lockfiles, fixes rpm verificiation warning</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.0.874-22" date="1633608000">- 1946578 fix segfault on case mismatch in config/record file</changelog>
</package>
<package pkgid="f70850a71be950fee9064397eb9344c08ded06a4d6118ee12f60836ac8e0f4d0" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.262.b10" rel="1.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b07-0.1.ea" date="1592308800">- Update to aarch64-shenandoah-jdk8u262-b07.
- Drop JDK-8243541 backport now applied upstream.
- Resolves: rhbz#1838811</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.262.b07-0.2.ea" date="1592568000">- Created copy of java as alt-java and adapted alternatives and man pages
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b07-0.3.ea" date="1592913600">- Update to aarch64-shenandoah-jdk8u262-b07-shenandoah-merge-2020-06-18.
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b08-0.1.ea" date="1593172800">- Update to aarch64-shenandoah-jdk8u262-b08.
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.1.ea" date="1593432000">- Update to aarch64-shenandoah-jdk8u262-b09.
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.2.ea" date="1593950400">- Sync alt-java support with java-11-openjdk version.
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.3.ea" date="1594296000">- Update to aarch64-shenandoah-jdk8u262-b09-shenandoah-merge-2020-07-03
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.4.ea" date="1594382400">- With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b09-0.5.ea" date="1594468800">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Introduce jfr_arches for architectures which support JFR.
- Introduce sa_arches for architectures which support the serviceability agent.
- Introduce share_arches for architectures which support class sharing (-Xshare:dump).
- Resolves: rhbz#1838811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.262.b10-1" date="1594555200">- Update to aarch64-shenandoah-jdk8u262-b10.
- Switch to GA mode for final release.
- Update release notes for 8u262 release.
- Split JDK-8042159 patch into per-repo patches as upstream.
- Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
- Resolves: rhbz#1838811</changelog>
</package>
<package pkgid="b314e6fef82a06c89ba004d98921dae220676c36387da615f51931e69c1131d7" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.272.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.1.ea" date="1602504000">- Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
- Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504001">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="eb5c893dda836ba8f7513e5c84195a3a25f27713659622e7d5614c5b3780adf9" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.275.b01" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b05-0.2.ea" date="1602504000">- Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b06-0.0.ea" date="1602590400">- Update to aarch64-shenandoah-jdk8u272-b06.
- Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b07-0.0.ea" date="1602590401">- Update to aarch64-shenandoah-jdk8u272-b07.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b08-0.0.ea" date="1602590402">- Update to aarch64-shenandoah-jdk8u272-b08 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.0.ea" date="1602676800">- Update to aarch64-shenandoah-jdk8u272-b09 (EA).
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763200">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b09-0.1.ea" date="1602763201">- Include a test in the RPM to check the build has the correct vendor information.
- Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-0" date="1602936000">- Update to aarch64-shenandoah-jdk8u272-b10.
- Switch to GA mode for final release.
- Update release notes for 8u272 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- Delay tzdata 2020b dependency until tzdata update has shipped.
- Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
- Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 &amp; JDK-8244955
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.272.b10-1" date="1603195200">- Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.275.b01-0" date="1604664000">- Update to aarch64-shenandoah-jdk8u275-b01 (GA)
- Update release notes for 8u275.
- Resolves: rhbz#1895062</changelog>
</package>
<package pkgid="a6f7d6e4ad67a886ef91afbeff0ee67a339d224ca574964e650109fcabb15db2" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.282.b08" rel="1.el7_9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428800">- Added patch600: rh1750419-redhat_alt_java.patch
- Replaced alt-java placeholder with real patched alt-java
- Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
- Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
- Both surpassed by new patch
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b01-0.1.ea" date="1607428801">- Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
- Resolves: rhbz#1901690</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b02-0.0.ea" date="1608120000">- Update to aarch64-shenandoah-jdk8u282-b02 (EA)
- Update release notes for 8u282-b02.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b03-0.0.ea" date="1609588800">- Update to aarch64-shenandoah-jdk8u282-b03 (EA)
- Update release notes for 8u282-b03.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b04-0.0.ea" date="1609934400">- Update to aarch64-shenandoah-jdk8u282-b04 (EA)
- Update release notes for 8u282-b04.
- Remove upstreamed patch PR3519
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b05-0.0.ea" date="1610366400">- Update to aarch64-shenandoah-jdk8u282-b05 (EA)
- Update release notes for 8u282-b05 and make some minor corrections.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b06-0.0.ea" date="1610539200">- Update to aarch64-shenandoah-jdk8u282-b06 (EA)
- Update release notes for 8u282-b06.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b07-0.0.ea" date="1610712000">- Update to aarch64-shenandoah-jdk8u282-b07 (EA)
- Update release notes for 8u282-b07.
- Fix placement issue in release notes, caught by comparing with vanilla version.
- Resolves: rhbz#1903903</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-0" date="1610712001">- Update to aarch64-shenandoah-jdk8u282-b08 (GA)
- Update release notes for 8u282-b08.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908963</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.282.b08-1" date="1610884800">- Cleanup package descriptions and version number placement.
- Resolves: rhbz#1908963</changelog>
</package>
<package pkgid="0400b20eab4e5f9d22363bf25a8d5cbbbc8da07217451b377c54900149da7c20" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.292.b10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b04-0.0.ea" date="1614945600">- Update to aarch64-shenandoah-jdk8u292-b04 (EA)
- Update release notes for 8u292-b04.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.0.ea" date="1615204800">- Update to aarch64-shenandoah-jdk8u292-b05 (EA)
- Update release notes for 8u292-b05.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.1.ea" date="1616068800">- Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
- Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b05-0.2.ea" date="1616068801">- Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
- Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
- Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
- Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b06-0.0.ea" date="1616414400">- Update to aarch64-shenandoah-jdk8u292-b06 (EA)
- Update release notes for 8u292-b06.
- Require tzdata 2020f due to JDK-8259048
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b07-0.0.ea" date="1616673600">- Update to aarch64-shenandoah-jdk8u292-b07 (EA)
- Update release notes for 8u292-b07.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b08-0.0.ea" date="1616846400">- Update to aarch64-shenandoah-jdk8u292-b08 (EA)
- Update release notes for 8u292-b08.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b09-0.0.ea" date="1617105600">- Update to aarch64-shenandoah-jdk8u292-b09 (EA)
- Update release notes for 8u292-b09.
- Resolves: rhbz#1938081</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-0" date="1617883200">- Update to aarch64-shenandoah-jdk8u292-b10 (GA)
- Update release notes for 8u292-b10.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1938201</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-1" date="1617969600">- Add CVE numbers.
- Require tzdata 2021a due to JDK-8260356
- Resolves: rhbz#1938201</changelog>
</package>
<package pkgid="73dcdc94e2c149cd8e4cdb8bae157feac441cf0f32972d2cecad54b0919d99b6" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.302.b08" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.292.b10-2" date="1622203200">- Add JDK-8266929 backport for RH1960024.
- Resolves: rhbz#1960024</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b01-0.0.ea" date="1624622400">- Update to aarch64-shenandoah-jdk8u302-b01 (EA)
- Update release notes for 8u302-b01.
- Switch to EA mode.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b02-0.0.ea" date="1624708800">- Update to aarch64-shenandoah-jdk8u302-b02 (EA)
- Update release notes for 8u302-b02.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.0.ea" date="1624795200">- Update to aarch64-shenandoah-jdk8u302-b03 (EA)
- Update release notes for 8u302-b03.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b03-0.1.ea" date="1624968000">- Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
- Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b04-0.0.ea" date="1625054400">- Update to aarch64-shenandoah-jdk8u302-b04 (EA)
- Update release notes for 8u302-b04.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b05-0.0.ea" date="1625227200">- Update to aarch64-shenandoah-jdk8u302-b05 (EA)
- Update release notes for 8u302-b05.
- Remove JDK-8266929/RH1960024 as now upstream.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b06-0.0.ea" date="1625572800">- Update to aarch64-shenandoah-jdk8u302-b06 (EA)
- Update release notes for 8u302-b06.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b07-0.0.ea" date="1625745600">- Update to aarch64-shenandoah-jdk8u302-b07 (EA)
- Update release notes for 8u302-b07.
- Resolves: rhbz#1967809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-0" date="1626436800">- Update to aarch64-shenandoah-jdk8u302-b08 (EA)
- Update release notes for 8u302-b08.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="66aac80347960d41aa48db3d01dbe9eff6d0312759173e595a2e63e9512f6731" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.312.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.302.b08-1" date="1631275200">- Remove non-Free test and demo files from source tarball.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b01-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b01 (EA)
- Update release notes for 8u312-b01.
- Switch to EA mode.
- Remove "-clean" suffix as no 8u312 builds are unclean.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052801">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
</package>
<package pkgid="f3211a48746cb6ab1655b38576fe0112af7c1ce1bb0d3b93a315c9a731009a22" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.322.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b02-0.1.ea" date="1632052800">- Update to aarch64-shenandoah-jdk8u312-b02 (EA)
- Update release notes for 8u312-b02.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b03-0.1.ea" date="1632484800">- Update to aarch64-shenandoah-jdk8u312-b03 (EA)
- Update release notes for 8u312-b03.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.1.ea" date="1632657600">- Update to aarch64-shenandoah-jdk8u312-b04 (EA)
- Update release notes for 8u312-b04.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="275cc9fa20f9bcebe2932f68460e4385dc9ea981f6654618f75b13ab4eb0d0f2" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.332.b09" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b04-0.2.ea" date="1632744000">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
</package>
<package pkgid="5d74cae46823e91071c40e1036e6f0c6f3a98d2e7484efbe9c8c793d3fe5ee64" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.342.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.1.ea" date="1633003200">- Update to aarch64-shenandoah-jdk8u312-b05 (EA)
- Update release notes for 8u312-b05.
- Related: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
</package>
<package pkgid="fb5b469d2541a1e5193801c266352c3631e6be0305cd7784fea303415b2d133f" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.345.b01" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.2.ea" date="1634040000">- Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
- Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
- Resolves: rhbz#1999735</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b05-0.3.ea" date="1634126400">- Add patch to improve performance of common separators in Scanner.useLocale
- Move alt-java patch to correct section.
- Resolves: rhbz#1862929</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
</package>
<package pkgid="c723e564f02ed86aed4325bb4b6eeb7c0204624be4f1efa278aed4b3e8d3bf2e" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.352.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.312.b07-1" date="1634299200">- Update to aarch64-shenandoah-jdk8u312-b07 (EA)
- Update release notes for 8u312-b07.
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2011826</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b04-0.1.ea" date="1641816000">- Update to aarch64-shenandoah-jdk8u322-b04 (EA)
- Update release notes for 8u322-b04.
- Require tzdata 2021c as of JDK-8274407.
- Switch to EA mode.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Related: rhbz#2022809</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="6a97f506fe839a5f6d7f2133c2afb1d8214b8eef86157c9d0ba6cd41083fe0df" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.362.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.322.b06-1" date="1642766400">- Update to aarch64-shenandoah-jdk8u322-b06 (EA)
- Update release notes for 8u322-b06.
- Switch to GA mode for final release.
- Require tzdata 2021e as of JDK-8275766.
- Update tarball generation script to use git following shenandoah-jdk8u's move to github
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
</package>
<package pkgid="f744f4b683ce69c409440c0362651048f71042f9e5b532aee3c1bfd0c0f8260f" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.372.b07" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b01-0.1.ea" date="1650196800">- Update to shenandoah-jdk8u332-b01 (EA)
- Update release notes for shenandoah-8u332-b01.
- Switch to EA mode.
- Related: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b06-0.1.ea" date="1650283200">- Update to shenandoah-jdk8u332-b06 (EA)
- Update release notes for shenandoah-8u332-b06.
- Resolves: rhbz#2047529</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.332.b09-1" date="1650283201">- Update to shenandoah-jdk8u332-b09 (GA)
- Update release notes for 8u332-b09.
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-04-19 @ 1pm PT.
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
</package>
<package pkgid="0dc8df270eb23eeec4686ecc1b040293023e50ca6c9e3b0277a825390b24e049" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.382.b05" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.342.b07-1" date="1658059200">- Update to shenandoah-jdk8u342-b07
- Update release notes for shenandoah-8u342-b07.
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Remove redundant "REPOS" variable from tarball script
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Rebase JDK-8186464 patch so it applies after JDK-8190753
- Resolves: rhbz#2106502</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.345.b01-1" date="1659614400">- Update to shenandoah-jdk8u345-b01 (GA)
- Update release notes for 8u345-b01.
- Resolves: rhbz#2112383</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-1" date="1665748800">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u372-b05 (GA)
- Update release notes for shenandoah-8u372-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="069830bda62057f37ecc98bd6cfc42ebafb5467f19861096e5083ea1b1eeec81" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.392.b08" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.352.b08-2" date="1665921600">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Add test to ensure timezones can be translated
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b07-0.1.ea" date="1673438400">- Update to shenandoah-jdk8u362-b07 (EA)
- Update release notes for shenandoah-8u362-b07.
- Switch to EA mode for 8u362 pre-release builds.
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Drop tzdata patches for 2022d &amp; 2022e (JDK-8294357 &amp; JDK-8295173) which are now upstream
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150191</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.362.b08-1" date="1673611200">- Update to shenandoah-jdk8u352-b08 (GA)
- Update release notes for shenandoah-8u352-b08.
- Fix broken links and missing release notes in older releases.
- Drop RH1163501 patch which is not upstream or in 11, 17 &amp; 19 packages and seems obsolete
  - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
  - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
  - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
</package>
<package pkgid="a6a225a32837568756773da1915714241c61e4309d53cc46aa67837a68d84eff" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.402.b06" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.372.b07-1" date="1681819200">- Update to shenandoah-jdk8u372-b07 (GA)
- Update release notes for shenandoah-8u372-b07.
- Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182
- Resolves: rhbz#2159458</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b01-0.1.ea" date="1687953600">- Update to shenandoah-jdk8u382-b01 (EA)
- Update release notes for shenandoah-8u382-b01.
- Switch to EA mode.
- Remove JDK-8271199 patch which is now upstream.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b04-0.1.ea" date="1688731200">- Update to shenandoah-jdk8u382-b04 (EA)
- Update release notes for shenandoah-8u382-b04.
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.382.b05-1" date="1689336000">- Update to shenandoah-jdk8u382-b05 (GA)
- Update release notes for shenandoah-8u382-b05.
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11319</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939201">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-0.1.ea" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
</package>
<package pkgid="f07ba12107cedb3c4b534dd4fd01ea82cd13e6ca3db971366d0b89753a517251" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.412.b08" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-1" date="1696939200">- Update to shenandoah-jdk8u392-b08 (GA)
- Update release notes for shenandoah-8u392-b08.
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Regenerate PR2462 patch following JDK-8315135
- Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12212
- Resolves: RHEL-13574
- Resolves: RHEL-13575
- Resolves: RHEL-13576
- Resolves: RHEL-11319
- Resolves: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-2" date="1697457600">- Revert jcmd move as jcmd will not operate without tools.jar
- Related: RHEL-13577</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.392.b08-3" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19630</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b01-0.1.ea" date="1704283200">- Update to shenandoah-jdk8u402-b01 (EA)
- Update release notes for shenandoah-8u402-b01.
- Switch to EA mode.
- Sync NEWS with vanilla branch version.
- Related: RHEL-17914</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.402.b06-1" date="1704974400">- Update to shenandoah-jdk8u402-b06 (GA)
- Update release notes for shenandoah-8u402-b06.
- Drop local copy of JDK-8312489 which is now included upstream
- Switch to GA mode.
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-17914
- Resolves: RHEL-20965</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.412.b01-0.1.ea" date="1711022400">- Update to shenandoah-jdk8u412-b01 (EA)
- Update release notes for shenandoah-8u412-b01.
- Switch to EA mode.
- Related: RHEL-30926</changelog>
  <changelog author="Thomas Fitzsimmons &lt;fitzsim@redhat.com&gt; - 1:1.8.0.412.b01-0.1.ea" date="1711108800">- Invoke xz in multi-threaded mode
- generate_source_tarball.sh: Add WITH_TEMP environment variable
- generate_source_tarball.sh: Multithread xz on all available cores
- generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
- generate_source_tarball.sh: Update comment about tarball naming
- generate_source_tarball.sh: Reformat comment header
- generate_source_tarball.sh: Reformat and update help output
- generate_source_tarball.sh: Do a shallow clone, for speed
- generate_source_tarball.sh: Eliminate some removal prompting
- generate_source_tarball.sh: Make tarball reproducible
- generate_source_tarball.sh: Prefix temporary directory with temp-
- generate_source_tarball.sh: Remove temporary directory exit conditions
- generate_source_tarball.sh: Set compile-command in Emacs
- generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
- generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
- generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
- generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
- Use backward-compatible patch syntax
- generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
- generate_source_tarball.sh: Remove trailing period in echo
- generate_source_tarball.sh: Use long-style argument to grep
- generate_source_tarball.sh: Add license
- generate_source_tarball.sh: Add indentation instructions for Emacs
- Remove -T0 argument from systemtap tar invocation
- Related: RHEL-30926</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.412.b01-0.1.ea" date="1711108801">- Turn off xz multi-threading on i686 as it fails with an out of memory error
- Normalise whitespace
- Move to upstream tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
- generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
- generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
- generate_source_tarball.sh: Adapt version logic to work with 8u
- generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
- generate_source_tarball.sh: Update examples in header for clarity
- generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
- generate_source_tarball.sh: Only add --depth=1 on non-local repositories
- Move maintenance scripts to a scripts subdirectory
- icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
- jconsole.desktop.in: Restored by running icedtea_sync.sh
- policytool.desktop.in: Likewise.
- Restore IcedTea sources correctly in spec file
- discover_trees.sh: Set compile-command and indentation instructions for Emacs
- discover_trees.sh: shellcheck: Do not use -o (SC2166)
- discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
- generate_source_tarball.sh: Add authorship
- icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
- icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
- icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: Set compile-command and indentation instructions for Emacs
- openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
- openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
- openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
- generate_source_tarball.sh: Handle an existing checkout
- generate_source_tarball.sh: Sync indentation with java-21-openjdk version
- generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
- Related: RHEL-30926</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.412.b07-0.1.ea" date="1712318400">- Update to shenandoah-jdk8u412-b07 (EA)
- Update release notes for shenandoah-8u412-b07.
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- Resolves: RHEL-30926</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.412.b08-1" date="1712577600">- Update to shenandoah-jdk8u412-b08 (GA)
- Update release notes for shenandoah-8u412-b08.
- Complete release note for Certainly roots
- Switch to GA mode.
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Related: RHEL-30926</changelog>
</package>
<package pkgid="5285ecd2215497d16d69c44b00ecd07c8a9d1e83d99a420869bb404bcdcf46d2" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.10.0.9" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-5" date="1609243200">- Introduced ssbd_arches to denote architectures with SSBD mitigation (currently only x86_64)
- Introduced nm-based check to verify alt-java on ssbd_arches is patched, and no other alt-java or java binaries are patched
- RH1750419 patch amended to emit a warning on architectures where alt-java is the same as java
- Resolves: rhbz#1901695</changelog>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
</package>
<package pkgid="0c05b1189a30944153db4c11844e7c71c57a4c2a31e9c7e03f8edccba9af6db5" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.10.0.9" rel="1.el7_9"/>
  <changelog author="Andrew John Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609675200">- Update to jdk-11.0.10.0+1
- Update release notes to 11.0.10.0+1
- Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
- Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
- Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
- Cleanup debug package descriptions and version number placement.
- Switch to EA mode for 11.0.10 pre-release builds.
- Drop JDK-8222286 &amp; JDK-8254177 as applied upstream
- Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.1-0.0.ea" date="1609761600">- Add new Harfbuzz library to package listing and _privatelibs
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610366400">- Update to jdk-11.0.10.0+2
- Update release notes to 11.0.10.0+2
- Update tarball generation script to use PR3818 which handles JDK-8171279 changes
- Drop JDK-8250861 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.2-0.0.ea" date="1610452800">- Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.3-0.0.ea" date="1610452801">- Update to jdk-11.0.10.0+3
- Update release notes to 11.0.10.0+3
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.4-0.0.ea" date="1610539200">- Update to jdk-11.0.10.0+4
- Update release notes to 11.0.10.0+4
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.5-0.0.ea" date="1610625600">- Update to jdk-11.0.10.0+5
- Update release notes to 11.0.10.0+5
- Drop JDK-8222527 as applied upstream.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.8-0.0.ea" date="1610625601">- Update to jdk-11.0.10.0+8
- Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
- Resolves: rhbz#1903907</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-0" date="1610712000">- Update to jdk-11.0.10.0+9
- Update release notes to 11.0.10.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-01-19 @ 1pm PT.
- Resolves: rhbz#1908970</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.10.0.9-1" date="1614686400">- Add backport of JDK-8258836 to fix -Xcheck:jni warnings
- Resolves: rhbz#1897602</changelog>
</package>
<package pkgid="f174649f924f1b88a2d0109a74ba4c0d02b2f6c4916e6e1017571b3c4355a506" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.11.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616673600">- Perform static library build on a separate source tree with bundled image libraries
- Make static library build optional
- Based on initial work by Severin Gehwolf
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.2-0.1.ea" date="1616846400">- Debug builds need to find their documentation from the release build.
- RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
- Resolves: rhbz#1930527</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.3-0.0.ea" date="1616846401">- Update to jdk-11.0.11.0+3
- Update release notes to 11.0.11.0+3
- Resolves: rhbz#1938082</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 1:11.0.11.0.3-0.1.ea" date="1617019200">- Fix issue where CheckVendor.java test erroneously passes when it should fail.
- Add proper quoting so '&amp;' is not treated as a special character by the shell.
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.4-0.0.ea" date="1617019201">- Update to jdk-11.0.11.0+4
- Update release notes to 11.0.11.0+4
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.5-0.0.ea" date="1617710400">- Update to jdk-11.0.11.0+5
- Update release notes to 11.0.11.0+5
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
</package>
<package pkgid="c821b8288c492cd5fba03f6d30f53a6674c4cd5fe1df2a4353f47d7f8854c631" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.12.0.7" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.6-0.0.ea" date="1617969600">- Update to jdk-11.0.11.0+6
- Update release notes to 11.0.11.0+6
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.7-0.0.ea" date="1618142400">- Update to jdk-11.0.11.0+7
- Update release notes to 11.0.11.0+7
- Resolves: rhbz#1938082</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-0" date="1618228800">- Update to jdk-11.0.11.0+9
- Update release notes to 11.0.11.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-04-20 @ 1pm PT.
- Resolves: rhbz#1940228</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.11.0.9-1" date="1618315200">- Add backport of JDK-8187450 from 11.0.12 to fix RH1937736
- Resolves: rhbz#1937736</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.1-0.0.ea" date="1624881600">- Update to jdk-11.0.12.0+1
- Update release notes to 11.0.12.0+1
- Switch to EA mode for 11.0.12 pre-release builds.
- Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
- Remove local JDK-8187450 backport as now included upstream.
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.2-0.0.ea" date="1625227200">- Update to jdk-11.0.12.0+2
- Update release notes to 11.0.12.0+2
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.3-0.0.ea" date="1625486400">- Update to jdk-11.0.12.0+3
- Update release notes to 11.0.12.0+3
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.4-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+4
- Update release notes to 11.0.12.0+4
- Correct bug ID JDK-8264846 to intended ID of JDK-8264848
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745601">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
</package>
<package pkgid="5d8682fb7c96044b588e067c6c2f633aa42fa5b858b2691b4344a65eeb857c31" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.13.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.6-0.0.ea" date="1625745600">- Update to jdk-11.0.12.0+6
- Update release notes to 11.0.12.0+6
- Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
- Resolves: rhbz#1967811</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-0" date="1626177600">- Update to jdk-11.0.12.0+7
- Update release notes to 11.0.12.0+7
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-07-20 @ 1pm PT.
- Resolves: rhbz#1972395</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.12.0.7-1" date="1630584000">- Minor cosmetic improvements to make spec more comparable between variants
- Related: rhbz#1999936</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
</package>
<package pkgid="6c784845a8afb51cfd9330fdc87b3a669777bdeb3d58f85d4b448d0dc034919b" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.14.0.9" rel="1.el7_9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.12.0.7-2" date="1633348800">- Don't package lib/client and lib/client/classes.jsa which don't exist.
- Resolves: rhbz#1698873</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
</package>
<package pkgid="fff12a9fe630aeb40fa351d8d73227d817473aff9d4886d99e746275960c2844" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.14.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-3" date="1633867200">- Restructure the build so a minimal initial build is then used for the final build (with docs)
- This reduces pressure on the system JDK and ensures the JDK being built can do a full build
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.12.0.7-4" date="1633867201">- Reduce disk footprint by removing build artifacts by default.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.1-0.1.ea" date="1633953600">- Update to jdk-11.0.13.0+1
- Update release notes to 11.0.13.0+1
- Update tarball generation script to use git following OpenJDK 11u's move to github
- Switch to EA mode for 11.0.13 pre-release builds.
- Remove non-Free test from source tarball.
- Related: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.7-0.1.ea" date="1634040000">- Update to jdk-11.0.13.0+7
- Update release notes to 11.0.13.0+7
- Resolves: rhbz#1999936</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Update to jdk-11.0.12.0+8
- Update release notes to 11.0.12.0+8
- Switch to GA mode for final release.
- This tarball is embargoed until 2021-10-19 @ 1pm PT.
- Resolves: rhbz#2012332</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126401">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
</package>
<package pkgid="99c8bc262ab00ceaccc5b2330d10c007107e1494a6951aea0768a168ade9616b" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.15.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.13.0.8-1" date="1634126400">- Revert addition of libharfbuzz.so after its removal by JDK-8255790
- Resolves: rhbz#2012332</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1638360000">- Replaced hardcoded 11 by featurever where appropriate
- Fixed comment of `for slowdebug` to correct `any debug`
- Related: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
</package>
<package pkgid="da6ca18742926ae4a3c74dc72d6c331b0616ad7a51ed5a75238cb6ad458e927d" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.16.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.8-0.1.ea" date="1642161600">- Update to jdk-11.0.14.0+8
- Update release notes to 11.0.14.0+8
- Switch to EA mode for 11.0.14 pre-release builds.
- Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
- Rename blacklisted.certs to blocked.certs following JDK-8253866
- Resolves: rhbz#2022810</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
</package>
<package pkgid="199b341c40f288641775fa88c3ea984546810adb9125e3fc23c6dc19f1744f78" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.16.1.1" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.0.9-1" date="1642420800">- Update to jdk-11.0.14.0+9
- Update release notes to 11.0.14.0+9
- Switch to GA mode for final release.
- This tarball is embargoed until 2022-01-18 @ 1pm PT.
- Resolves: rhbz#2039366</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.14.1.1-1" date="1644580800">- Update to jdk-11.0.14.1+1
- Update release notes to 11.0.14.1+1
- Resolves: rhbz#2052805</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.1-0.1.ea" date="1649764800">- Update to jdk-11.0.15.0+1
- Update release notes to 11.0.15.0+1
- Switch to EA mode for 11.0.15 pre-release builds.
- Related: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.8-0.1.ea" date="1649764801">- Update to jdk-11.0.15.0+8
- Update release notes to 11.0.15.0+8
- Resolves: rhbz#2047531</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-1" date="1649851200">- Update to jdk-11.0.15.0+9
- Update release notes to 11.0.15.0+9
- Switch to GA mode for release
- ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
- Resolves: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650024000">- Remove security items from release notes that were only in 17u and N/A for 11u
- Related: rhbz#2073422</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
</package>
<package pkgid="0d5c2dd31a0e041a913920677674a8af8bedb9598ff471d6737b0f2c9bc6cb62" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.17.0.8" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.15.0.9-2" date="1650110400">- Add JDK-8284920 fix for XPath regression
- Related: rhbz#2073422</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657800000">- Add additional patch during tarball generation to align tests with ECC changes
- Related: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.0.8-1" date="1657972800">- Update to jdk-11.0.16+8
- Update release notes to 11.0.16+8
- Use same tarball naming style as java-17-openjdk and java-latest-openjdk
- Drop JDK-8284920 patch now upstreamed
- Print release file during build, which should now include a correct SOURCE value from .src-rev
- Update tarball script with IcedTea GitHub URL and .src-rev generation
- Use "git apply" with patches in the tarball script to allow binary diffs
- Include script to generate bug list for release notes
- Update tzdata requirement to 2022a to match JDK-8283350
- Make use of the vendor version string to store our version &amp; release rather than an upstream release date
- Explicitly require crypto-policies during build and runtime for system security properties
- Resolves: rhbz#2106510</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
</package>
<package pkgid="cc70486e3f360c667da02787f2d77e1831cdc7ae7a83df439a003c5e3054590d" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.18.0.10" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.16.1.1-1" date="1661342400">- Update to jdk-11.0.16.1+1
- Update release notes to 11.0.16.1+1
- Add patch to provide translations for Europe/Kyiv added in tzdata2022b
- Add test to ensure timezones can be translated
- Resolves: rhbz#2119512</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1662465600">- Update to jdk-11.0.17+1
- Update release notes to 11.0.17+1
- Switch to EA mode for 11.0.17 pre-release builds.
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
</package>
<package pkgid="216aa9da6b711abd26beaa669c756d2c586aacf60d40765ac531b4e0a687ef92" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.19.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884800">- Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.1-0.1.ea" date="1664884801">- Try to build using system HarfBuzz to avoid build failures with 4.4.1 &amp; gcc 4.8.5
- Related: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.7-0.1.ea" date="1664971200">- Update to jdk-11.0.17+7
- Update release notes to 11.0.17+7
- Resolves: rhbz#2130373</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
</package>
<package pkgid="b40ded6e372c76c857d45671c36f6c8085e1cbaf7ea470544c77e52234c58bfd" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.20.0.8" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-1" date="1665576000">- Update to jdk-11.0.17+8 (GA)
- Update release notes to 11.0.17+8
- Switch to GA mode for release
- Resolves: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.17.0.8-2" date="1665835200">- Update in-tree tzdata to 2022e with JDK-8294357 &amp; JDK-8295173
- Update CLDR data with Europe/Kyiv (JDK-8293834)
- Drop JDK-8292223 patch which we found to be unnecessary
- Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
- Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
- Related: rhbz#2133695</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.1-0.1.ea" date="1671105600">- Update to jdk-11.0.18+1
- Update release notes to 11.0.18+1
- Switch to EA mode for 11.0.18 pre-release builds.
- Drop local copies of JDK-8294357 &amp; JDK-8295173 now upstream contains tzdata 2022e
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
</package>
<package pkgid="ac5f9d0bd7aef52dc27d60a347fbd03b7cefcb9875b4372ec1c562da32aa3543" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.21.0.9" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.9-0.2.ea" date="1672747200">- Update to jdk-11.0.18+9
- Update release notes to 11.0.18+9
- Drop local copy of JDK-8293834 now this is upstream
- Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 &amp; JDK-8297804
- Update TestTranslations.java to test the new America/Ciudad_Juarez zone
- Resolves: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-1" date="1673438400">- Update to jdk-11.0.18+10 (GA)
- Update release notes to 11.0.18+10
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
- Related: rhbz#2150192</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.18.0.10-2" date="1673611200">- Add missing release note for JDK-8295687
- Resolves: rhbz#2160111</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
</package>
<package pkgid="2b5fe392219954970ba75cd16dc83d77279ed3f201e5a7af04d1e3b069d074c2" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.22.0.7" rel="1.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.19.0.7-1" date="1681473600">- Update to jdk-11.0.19.0+7
- Update release notes to 11.0.19.0+7
- Require tzdata 2023c due to local inclusion of JDK-8274864 &amp; JDK-8305113
- Update generate_tarball.sh to add support for passing a boot JDK to the configure run
- Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
- Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
- Rebase RH1750419 alt-java patch against 11.0.19+6
- ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
- Resolves: rhbz#2185182</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.1-0.1.ea" date="1688126400">- Update to jdk-11.0.20+1 (EA)
- Update release notes to 11.0.20+1
- Switch to EA mode
- Drop local inclusion of JDK-8274864 &amp; JDK-8305113 as they are included in 11.0.20+1
- Add missing Swing release note
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.7-0.1.ea" date="1689076800">- Update to jdk-11.0.20+7 (EA)
- Update release notes to 11.0.20+7
- Related: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
</package>
<package pkgid="e990aba32b3aafcf9206f4f214b9f1b2deaad813633f87253e7e9d69237b344d" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.23.0.9" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.0.8-1" date="1689163200">- Update to jdk-11.0.20.0+8 (GA)
- Update release notes to 11.0.20.0+8
- Switch to GA mode for release
- ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
- Resolves: rhbz#2221106</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.20.1.1-1" date="1693915200">- Update to jdk-11.0.20.1+1 (GA)
- Update release notes to 11.0.20.1+1
- Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
- Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
- Update openjdk_news script to specify subdirectory last
- Add missing discover_trees script required by openjdk_news
- Synchronise runtime and buildtime tzdata requirements
- Update README.md to match the version in later RHEL releases
- Resolves: rhbz#2236229</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198400">- For non debug subpackages, ghosted all alternatives (rhbz1649776)
- For non system JDKs, if-outed versionless provides.
- Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
- Related: RHEL-11320</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-1" date="1697198401">- Update to jdk-11.0.21+9 (GA)
- Update release notes to 11.0.21+9
- Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
- Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
- Update bug URL for RHEL to point to the Red Hat customer portal
- Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
- Apply all patches using -p1
- Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
- Add missing JFR alternative ghost
- Move jcmd to the headless package
- Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
- Disable the serviceability agent on Zero architectures even when the architecture itself is supported
- ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
- Resolves: RHEL-12217
- Resolves: RHEL-12910
- Resolves: RHEL-12913
- Resolves: RHEL-11320
- Resolves: RHEL-13227
- Resolves: RHEL-13217</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.21.0.9-2" date="1702728000">- Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel &amp; java-sdk
- Resolves: RHEL-19642</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.6-0.1.ea" date="1704715200">- Update to jdk-11.0.22+6 (EA)
- Update release notes to 11.0.22+6
- Switch to EA mode
- Drop local copy of JDK-8312489 which is now included upstream
- Resolves: RHEL-21031</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.22.0.7-1" date="1704888000">- Update to jdk-11.0.22+7 (GA)
- Update release notes to 11.0.22+7
- Switch to GA mode for release
- ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
- Resolves: RHEL-20966</changelog>
  <changelog author="Anton Bobrov &lt;abobrov@redhat.com&gt; - 1:11.0.23.0.1-0.1.ea" date="1711022400">- Update to jdk-11.0.23+1 (EA)
- Update release notes to 11.0.23+1
- Switch to EA mode
- Speed up PPC build by removing ppc64le --with-jobs=1 workaround</changelog>
  <changelog author="Anton Bobrov &lt;abobrov@redhat.com&gt; - 1:11.0.23.0.9-1" date="1712750400">- Update to jdk-11.0.23+9 (GA)
- Update release notes to 11.0.23+9
- Switch to GA mode for release
- Require tzdata 2024a due to upstream inclusion of JDK-8322725
- Only require tzdata 2023d for now as 2024a is unavailable in buildroot
- ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
- Resolves: RHEL-30914</changelog>
  <changelog author="Anton Bobrov &lt;abobrov@redhat.com&gt; - 1:11.0.23.0.9-2" date="1712923200">- Fix 11.0.22 release date in NEWS
- Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds</changelog>
</package>
<package pkgid="c67c62302d31d7b81568e03566e8f59f148a7946d74ad8b31e9ccc757a902d6b" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.9.11" rel="0.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.6-0.0.ea" date="1602676800">- Update to jdk-11.0.9+6 (EA)
- Update tarball generation script to use PR3802, handling JDK-8233228 &amp; JDK-8177334
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.6-0.1.ea" date="1602676801">- Update static-libs packaging to new layout
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.7-0.0.ea" date="1602676802">- Update to jdk-11.0.9+7 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.8-0.0.ea" date="1602676803">- Update to jdk-11.0.9+8 (EA)
- Remove JDK-8252258/RH1868406 now applied upstream.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676804">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676805">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676806">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
</package>
<package pkgid="0d4e4d365a16a493b0d1549afa30fd856ddc3e2b39d86ba4994f521384c307bb" name="java-11-openjdk" arch="src">
  <version epoch="1" ver="11.0.9.11" rel="2.el7_9"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.9-0.0.ea" date="1602676800">- Update to jdk-11.0.9+9 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.0.ea" date="1602676801">- Update to jdk-11.0.9+10 (EA)
- Resolves: rhbz#1876665</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602676802">- Set vendor property and vendor URLs
- Made URLs to be preconfigured by OS
- Moved vendor_version_string to a better place
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.10-0.1.ea" date="1602763200">- Improve quoting of vendor name
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763201">- Update to jdk-11.0.9+11
- Update release notes for 11.0.9 release.
- Add backport of JDK-8254177 to update to tzdata 2020b
- Require tzdata 2020b due to resource changes in JDK-8254177
- This tarball is embargoed until 2020-10-20 @ 1pm PT.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-0" date="1602763202">- Delay tzdata 2020b dependency until tzdata update has shipped.
- Resolves: rhbz#1876665</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1603108800">- Fix directory ownership of static-libs package
- Resolves: rhbz#1896610</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:11.0.9.11-1" date="1603972800">- Move all license files to NVR-specific JVM directory.
- This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
- Resolves: rhbz#1896609</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:11.0.9.11-1" date="1604491200">- Update to jdk-11.0.9.1+1
- RPM version stays at 11.0.9.11 so as to not break upgrade path.
- Adds a single patch for JDK-8250861.
- Resolves: rhbz#1895275</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:11.0.9.11-2" date="1605182400">- Add backport of JDk-8222537 so the Host header is sent when using proxies.
- Resolves: rhbz#1869530</changelog>
</package>
<package pkgid="581c29c0176d611e03f04a7de77bae793665b8448d24b3efaf5e7de0cc4420dc" name="jss" arch="src">
  <version epoch="0" ver="4.4.9" rel="4.el7_9"/>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-2" date="1529582400">- Red Hat Bugzilla #1560682 - (RFE) Migrate RHCS x509 cert and crl
  functionality to JSS (jmagne)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.4-3" date="1530792000">- Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data (cfu)
- Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.6-1" date="1552651200">- Bugzilla #1659527 - Rebase JSS in RHEL 7.7 (ascheel)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.7-1" date="1565006400">- Bugzilla #1733590 - Rebase JSS in RHEL 7.8 (ascheel)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.7-2" date="1568203200">- Bugzilla #1747967 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.7-3" date="1585483200">- Bugzilla #1710105 - JSS: add RSA PSS support (jmagne)
- Bugzilla #1796642 - JSS -- remove hardcoded native library
  /usr/lib{64}/jss/libjss4.so (ascheel)</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.9-1" date="1585915200">- Rebase to JSS v4.4.9
  Bugzilla #1818631 - Rebase JSS to v4.4.9 in RHEL 7.9</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.9-2" date="1585915201">- Update v4.4.9 to match upstream</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.9-3" date="1588852800">- Fix issue with RSA/PSS and SHA-512
  Bugzilla #1710105</changelog>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; 4.4.9-4" date="1709640000">- Updated nspr-devel and nss-devel build requirements as well as nss runtime
  requirements [mharmsen]
- RHEL-18401 - JSS - add AES support for TMS server-side keygen on latest
  HSM / FIPS environment [RHEL 7.9.z] [jmagne]
- JSS: add RSA PSS support
  Add PSS cases to algorithm name translating method [jmagne]
- Add GitLab synchronization job [edewata]
- Add AES support for TMS server-side keygen on latest
  HSM / FIPS environment [RHCS 9.7.z]
  Back port AES KWP wrap alg support only for JSS in this branch to allow for
  the TMS bug referenced above to work. [jmagne]
- Empty commit to fix commit msg from previous commit
  JSS- add AES support for TMS server-side keygen on latest HSM / FIPS
  environment [RHCS 9.7.z]
  Back port AES KWP wrap alg support only for JSS in this branch to allow for
  the TMS bug referenced above to work. [jmagne]
- RHEL-23935 - JSS - PrettyPrintCert does not properly translate AIA
  information into a readable format [RHEL 7.9.z] [mfargett]
- Fix AIA extension print
  The "Authority Info Access" extension was not included in the oid
  extension  map so it was not correctly printed.
  This add AIA extension to the oid map. [mfargett]
- Fix SIA extension
  The "Subject Info Access" extension was not included in the oid
  extension  map so it was not correctly printed.
  This add SIA extension to the oid map. [mfargett]</changelog>
</package>
<package pkgid="89c132d8fdf7137b4b7e883aba262d16efe564c92cd03e0dfb96547841ed5a96" name="kbd" arch="src">
  <version epoch="0" ver="1.15.5" rel="16.el7_9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-7" date="1383739200">- Add PAM config for vlock
  Resolves: #1026819</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-8" date="1386849600">- Fix vlock doesn't perform PAM account management or credential reinitialization
  Resolves: #1032140</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.15.5-10" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-11" date="1411646400">- Include xkb layouts from xkeyboard-config converted to console keymaps
  Resolves: #1122058</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-12" date="1460376000">- Add eurlatgr console font
  Resolves: #1310286</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-13" date="1487073600">- Add compose rules to generated cz.map
  Resolves: #1181581</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-14" date="1529409600">- Replace CtrlL_Lock with Caps_Lock in generated us.map
  Resolves: #1441411
- Improve man pages and usage messages quality and consistency
  Resolves: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-15" date="1534161600">- Add man page for kbdinfo, link open man page to openvt man page
  Related: #949015</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.15.5-16" date="1635249600">- Fix vlock when console or terminal is closed abruptly
  Resolves: #1486233</changelog>
</package>
<package pkgid="4d9a3650749c3628c666c6a68fbaa5af106fa7413853c1d61964bcda3fdda5df" name="kde-workspace" arch="src">
  <version epoch="0" ver="4.11.19" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11-19-7" date="1441627200">- Requires: cpp
  Resolves: bz#1260129</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-8" date="1458648000">- Powerdevil: do not notify about a non existent action
  Resolves: bz#1289149
- Plasma taskmanager: close context menu when task is closed
  Resolves: bz#1262603</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-9" date="1505131200">- Fix loading of get hot new stuff for KWin decorations and effects
  Resolves: bz#1422002</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-10" date="1506427200">- Fix grouping of tasks in taskmanager applet
  Resolves: bz#1348917
- Fix unlocking of kscreenlocker, unlock it just once
  Resolves: bz#1333441</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-11" date="1507896000">- Disable plasma screensaver for security reasons
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-12" date="1508155200">- Make sure that plasma screensaver is not used when previously configured
  Resolves: bz#1342560</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-13" date="1549972800">- Sanitise notification HTML
  Resolves: bz#1568853

- Increase cpu buffer size in ksysguard
  Resolves: bz#1611762</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-14" date="1565006400">- Do not show disabled buttons in Plastik decoration theme
  Resolves: bz#1677641

- Taskmanager: dismiss group when application is closed and there is enough space
  Resolve: bz#1698048</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-15" date="1575460800">- Fix curly bracket in the patch for Plastik decoration theme
  Resolves: bz#1779401</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.11.19-16" date="1594728000">- KSysguard: Increase cpu buffer size in ksysguard
  Resolves: bz#1856159</changelog>
</package>
<package pkgid="9a71524749326acd25eb6fd9ef5d5baea87601dcf8cbb333bca1c1ec1d888240" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.102.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
</package>
<package pkgid="1e3f1b9c26a828ea5daf598e1bcad41f50b6c1bd6d51062fecb9338898cecb24" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.105.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
</package>
<package pkgid="578c769026efe671df773c627323d5dfb29a4c14a6c16c320d66e9bec06bfe0c" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.108.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.100.1.el7]" date="1692792000">- bnxt: count Tx drops (Jamie Bainbridge) [2175062]
- bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062]
- netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233}
- netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.101.1.el7]" date="1693569600">- cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706]
- kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180]
- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.102.1.el7]" date="1695643200">- net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609}
- NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.103.1.el7]" date="1696852800">- net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611}
- net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555]
- net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776}
- redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.104.1.el7]" date="1697803200">- CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
- xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534]
- Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982}
- KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982}
- Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893]
- docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229893]
- x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893]
- x86: Sync Intel family names &amp; cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.105.1.el7]" date="1699272000">- net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}
- net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
</package>
<package pkgid="e20cdb47f1069f598443d4b8f4bfe6bb951ef06bb3e1b9921021be569ec543da" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.11.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
</package>
<package pkgid="44bad9caa6c26ecd41df9267817e46f7a388ccbb66385186d480e95e64c6c08b" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.114.2.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.106.1.el7]" date="1701172800">- gfs2: Fix quota=quiet oversight (Bob Peterson) [2196280]
- gfs2: Free quota data objects synchronously (Andreas Gruenbacher) [2196280]
- gfs2: Fix initial quota data refcount (Andreas Gruenbacher) [2196280]
- gfs2: Factor out duplicate quota data disposal code (Andreas Gruenbacher) [2196280]
- gfs2: Use gfs2_qd_dispose in gfs2_quota_cleanup (Andreas Gruenbacher) [2196280]
- gfs2: Fix wrong quota shrinker return value (Andreas Gruenbacher) [2196280]
- gfs2: ignore negated quota changes (Bob Peterson) [2196280]
- gfs2: Introduce new quota=quiet mount option (Bob Peterson) [2196280]
- gfs2: Add quota_change type (Bob Peterson) [2196280]
- gfs2: Rename sd_{ glock =&gt; kill }_wait (Andreas Gruenbacher) [2196280]
- gfs2: Wake up when sd_glock_disposal becomes zero (Alexander Aring) [2196280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.107.1.el7]" date="1702555200">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Phil Sutter) [RHEL-8433] {CVE-2023-42753}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.108.1.el7]" date="1704369600">- net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez) [RHEL-6302]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.109.1.el7]" date="1704974400">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.110.1.el7]" date="1705579200">- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.111.1.el7]" date="1706184000">- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.112.1.el7]" date="1706875200">- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy-&gt;kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.113.1.el7]" date="1707739200">- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.114.1.el7]" date="1707998400">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.114.2.el7]" date="1709467200">- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}</changelog>
</package>
<package pkgid="cf53052d8e84dc36127de0de694742689da972886214a2f73d4a61befd9f5671" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.118.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.109.1.el7]" date="1704974400">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Waiman Long) [RHEL-17703]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) [2224973]
- scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) [2224973]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.110.1.el7]" date="1705579200">- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.111.1.el7]" date="1706184000">- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.112.1.el7]" date="1706875200">- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy-&gt;kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.113.1.el7]" date="1707739200">- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.114.1.el7]" date="1707998400">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.115.1.el7]" date="1708603200">- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.116.1.el7]" date="1709208000">- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.117.1.el7]" date="1711972800">- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ensure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.118.1.el7]" date="1712232000">- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]</changelog>
</package>
<package pkgid="75d1ac7290f32c788e5f0ab10c09ebae16a83b8cb5a9d807f3d323b60c3fd46e" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.119.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.110.1.el7]" date="1705579200">- gfs2: Fix glock recursion on withdraw during recovery (Andreas Gruenbacher) [RHEL-17223]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.111.1.el7]" date="1706184000">- redhat: rewrite genlog and support Y- tags (Jan Stancek)
- scsi: zfcp: Fix double free of FSF request when qdio send fails (Tobias Huschle) [RHEL-16335]
- fbcon: set_con2fb_map needs to set con2fb_map! (Jocelyn Falempe) [RHEL-1204] {CVE-2023-38409}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.112.1.el7]" date="1706875200">- net: sched: sch_qfq: Use non-work-conserving warning handler (Davide Caratti) [RHEL-14397]
- net: sched: sch_qfq: Fix UAF in qfq_dequeue() (Davide Caratti) [RHEL-14397] {CVE-2023-4921}
- cpufreq: Initialize policy-&gt;kobj while allocating policy (Waiman Long) [2161654]
- net: bonding: fix possible NULL deref in rlb code (Hangbin Liu) [RHEL-17227]
- net: bonding: fix use-after-free after 802.3ad slave unbind (Hangbin Liu) [RHEL-17227]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.113.1.el7]" date="1707739200">- igb: set max size RX buffer when store bad packet is enabled (Wander Lairson Costa) [RHEL-15181] {CVE-2023-45871}
- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: Use separate L2CAP LE credit based connection result values (David Marlin) [RHEL-2742] {CVE-2022-42896}
- Bluetooth: L2CAP: Fix L2CAP_CR_SCID_IN_USE value (David Marlin) [RHEL-2742] {CVE-2022-42896}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.114.1.el7]" date="1707998400">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-23500] {CVE-2024-1086}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.115.1.el7]" date="1708603200">- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.116.1.el7]" date="1709208000">- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.117.1.el7]" date="1711972800">- tracing/perf: Fix double put of trace event when init fails (Michael Petlan) [RHEL-18052]
- tracing: Fix race in perf_trace_buf initialization (Michael Petlan) [RHEL-18052]
- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- net/sched: sch_hfsc: Ensure inner classes have fsc curve (Davide Caratti) [RHEL-16458] {CVE-2023-4623}
- gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28785]
- vt: vt_ioctl: fix race in VT_RESIZEX (Jay Shin) [RHEL-28639] {CVE-2020-36558}
- selinux: cleanup and consolidate the XFRM alloc/clone/delete/free code (Ondrej Mosnacek) [RHEL-27751]
- bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- bluetooth: Perform careful capability checks in hci_sock_ioctl() (David Marlin) [RHEL-3682] {CVE-2023-2002}
- cifs: fix panic in smb2_reconnect (Jay Shin) [RHEL-26301]
- af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Guillaume Nault) [RHEL-16144] {CVE-2023-4622}
- NFS: Set the stable writes BDI capability (Benjamin Coddington) [RHEL-22193]
- RDMA/i40iw: Prevent zero-length STAG registration (Kamal Heib) [RHEL-6299] {CVE-2023-25775}
- sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26402] {CVE-2024-26602}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.118.1.el7]" date="1712232000">- iommu/amd: Fix NULL dereference bug in match_hid_uid (Jerry Snitselaar) [RHEL-8721]</changelog>
  <changelog author="Radomir Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.119.1.el7]" date="1715256000">- PCI: hv: Reinstate wrongfully dropped hv_pcibus_removing state (Vitaly Kuznetsov) [RHEL-22919]</changelog>
</package>
<package pkgid="65060bb0838e24364fa4117462642bf39ca7b6cd2ef9e54b98fe70994d5b1739" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.15.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.7.1.el7]" date="1603972800">- [fs] xfs: fix off-by-one in inode alloc block reservation calculation (Brian Foster) [1857203]
- [fs] xfs: fix inode allocation block res calculation precedence (Brian Foster) [1857203]
- [powerpc] powernv/dump: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/dump: Fix race while processing OPAL dump (Gustavo Duarte) [1873189]
- [powerpc] powernv: opal-dump: Use IRQ_HANDLED instead of numbers in interrupt handler (Gustavo Duarte) [1873189]
- [powerpc] opal_elog: Handle multiple writes to ack attribute (Gustavo Duarte) [1873189]
- [powerpc] powernv/elog: Fix race while processing OPAL error log event (Gustavo Duarte) [1873189]
- [powerpc] powernv Adapt opal-elog and opal-dump to new sysfs_remove_file_self (Gustavo Duarte) [1873189]
- [powerpc] powernv: Fix opal-elog interrupt handler (Gustavo Duarte) [1873189]
- [net] flow_dissector: switch to siphash (Davide Caratti) [1835614] {CVE-2019-18282}
- [fs] xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen) [1875317] {CVE-2020-14385}
- [fs] cifs: make 'nodfs' mount opt a superblock flag (Leif Sahlberg) [1873033]
- [crypto] crypto: authenc - fix parsing key with misaligned rta_len (Herbert Xu) [1846355] {CVE-2020-10769}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.8.1.el7]" date="1604836800">- [kernel] sched/fair: Fix RCU stall upon -ENOMEM in sched_create_group() (Kenneth Yin) [1878000]
- [security] selinux: do not report error on connect(AF_UNSPEC) (Paolo Abeni) [1886305]
- [kernel] timer: Fix lockup in __run_timers() caused by large jiffies/timer_jiffies delta (Waiman Long) [1849716]
- [mm] revert "mm/page_alloc: fix memmap_init_zone pageblock alignment" (Artem Savkov) [1878732]
- [mm] page_alloc: Make paranoid check in move_freepages a VM_BUG_ON (Artem Savkov) [1878732]
- [nvme] rdma: Avoid double freeing of async event data (Gopal Tiwari) [1878950]
- [pci] hv: Fix a timing issue which causes kdump to fail occasionally (Mohammed Gamal) [1846667]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.9.1.el7]" date="1605528000">- [hv] hv: vmbus: Only notify Hyper-V for die events that are oops (Vitaly Kuznetsov) [1868130]
- [uapi] include: do not export changes made to struct ip_ct_sctp (Florian Westphal) [1887975]
- [net] openvswitch: free vport unless register_netdevice() succeeds (Timothy Redaelli) [1869190]
- [net] openvswitch: do not free vport if register_netdevice() is failed (Timothy Redaelli) [1869190]
- [kernel] signals: avoid random wakeups in sigsuspend() (Oleg Nesterov) [1704650]
- [fs] nfs: Fix getxattr kernel panic and memory overflow (Benjamin Coddington) [1880893] {CVE-2020-25212}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.10.1.el7]" date="1606219200">- [md] dm-mirror: provide the merge method (Mikulas Patocka) [1890059]
- [nvme] nvme-rdma: cancel async events before freeing event struct (David Milburn) [1857397]
- [s390] dasd: Use struct_size() helper (Sterling Alexander) [1886477]
- [s390] dasd: fix inability to use DASD with DIAG driver (Sterling Alexander) [1886477]
- [hv] hv_utils: drain the timesync packets on onchannelcallback (Vitaly Kuznetsov) [1884735]
- [hv] hv_utils: return error if host timesysnc update is stale (Vitaly Kuznetsov) [1884735]
- [x86] cpu: Re-apply forced caps every time CPU caps are re-read (Herbert Xu) [1886792]
- [x86] cpu: Factor out application of forced CPU caps (Herbert Xu) [1886792]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.11.1.el7]" date="1606737600">- [netdrv] hdlc_ppp: add range checks in ppp_cp_parse_cr() (Guillaume Nault) [1882078] {CVE-2020-25643}
- [fs] ext4: fix potential negative array index in do_split() (Pavel Reichl) [1846164] {CVE-2020-14314}
- [fs] nfsd: apply umask on fs without ACL support ("J. Bruce Fields") [1870215] {CVE-2020-24394}
- [kernel] watchdog/core: Remove the park_in_progress obfuscation (Waiman Long) [1860661]
- [mm] swap_slots: recheck cache-&gt;slots_ret under spin_lock_irq() protection (Rafael Aquini) [1862915]
- [netdrv] ethernet: i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Stefan Assmann) [1845677]
- [infiniband] mlx5: Fix use-after-free in dereg_mr() (Alaa Hleihel) [1880184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.2.el7]" date="1611230400">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]</changelog>
</package>
<package pkgid="05abf9f2733ac4b837a22347bdc9e5c1d25c76b823840c7e553d7a10ba61349d" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.2.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
</package>
<package pkgid="723d3a56a04a6fc5b348db6d8cbb518a8e313f496546609551b82daca9e174ec" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.2.2.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.2.el7]" date="1602936000">- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="9958ad4084a82a6dc50dd1fc2ede3d3ece25fd4616398b163655996df2332e4a" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.21.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.12.1.el7]" date="1607342400">- [mm] mmap: relax file size limit for regular files (Rafael Aquini) [1855985]
- [mm] mmap: introduce sane default mmap limits (Rafael Aquini) [1855985]
- [of] Move dynamic node fixups out of powerpc and into common code (Laurent Vivier) [1866138]
- [fs] nfs: Fix double-free in filelayout_alloc_commit_info/filelayout_free_lseg (Benjamin Coddington) [1679980]
- [hid] HID: hid-plantronics: Re-resend Update to map button for PTT products (Torez Smith) [1769502]
- [fs] dlm: make posix locks interruptible (Alexander Aring) [1826858]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.13.1.el7]" date="1607947200">- [s390] zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl (Philipp Rudo) [1896826]
- [block] block/diskstats: more accurate approximation of io_ticks for slow disks (Ming Lei) [1859364]
- [block] block: delete part_round_stats and switch to less precise counting (Ming Lei) [1859364]
- [md] dm: simplify start of block stats accounting for bio-based (Ming Lei) [1859364]
- [block] block/rsxx: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [block] drbd: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [md] md: use generic io stats accounting functions to simplify io stat accounting (Ming Lei) [1859364]
- [nvme] limit number of IO queues on Dell/Kioxia config (Gopal Tiwari) [1883403]
- [netdrv] hv_netvsc: make recording RSS hash depend on feature flag (Mohammed Gamal) [1898280]
- [netdrv] hv_netvsc: record hardware hash in skb (Mohammed Gamal) [1898280]
- [fs] block: Fix use-after-free in blkdev_get() (Ming Lei) [1902414] {CVE-2020-15436}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.14.1.el7]" date="1608552000">- [fs] nfsd: fix incorrect umasks ("J. Bruce Fields") [1905208]
- [hv] vmbus: Add timeout to vmbus_wait_for_unload (Mohammed Gamal) [1888979]
- [scsi] qla2xxx: Fix device loss on 4G and older HBAs (Nilesh Javali) [1889311]
- [s390] dasd: Fix zero write for FBA devices (Philipp Rudo) [1896839]
- [net] ipv6: use in6_dev_put in dad timer handler instead of __in6_dev_put (Xin Long) [1809519]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
</package>
<package pkgid="cf96ff0d85f9f1f5cd69fe4e4a4210b46221c178f47b0776a36fbb46066392b3" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.24.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.15.1.el7]" date="1610366400">- [fs] ceph: quota: fix null pointer dereference in quota check (Jeff Layton) [1890386]
- [netdrv] revert "mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query" (Alaa Hleihel) [1896756]
- [kernel] timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion (Waiman Long) [1890911]
- [kernel] exit: Optimize forget_original_parent() for large thread group exiting (Waiman Long) [1872110]
- [kernel] exit: reparent: call forget_original_parent() under tasklist_lock (Waiman Long) [1872110]
- [kernel] Disable tasklist_waiters when qrwlock is enabled (Waiman Long) [1872110]
- [fs] cifs: handle ERRBaduid for SMB1 (Leif Sahlberg) [1847041]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
</package>
<package pkgid="273d09622966d1bfb23e27e18872eea647f3fae8bcf238b854dbc674c0c4d085" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.25.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.16.1.el7]" date="1611057600">- [tty] Fix -&gt;pgrp locking in tiocspgrp() (Chris von Recklinghausen) [1908193] {CVE-2020-29661}
- [net] fix struct pid memory leak (Jay Shin) [1901797]
- [hid] Fix assumption that devices have inputs (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: the driver now neeed MEMLESS_FF infrastructure (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Add rumble support for Xbox One S controller (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] microsoft: Convert private data to be a proper struct (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] revert "hid: microsoft: fix invalid rdesc for 3k kbd" (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] input: ignore System Control application usages if not System Controls (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [hid] hid-microsoft: Do the check for the ms usage page per device (Chris von Recklinghausen) [1821870] {CVE-2019-19532}
- [net] net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc (Antoine Tenart) [1903819]
- [net] net-sysfs: take the rtnl lock when storing xps_cpus (Antoine Tenart) [1903819]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.17.1.el7]" date="1611576000">- [x86] kvm: svm: Initialize prev_ga_tag before use ("Dr. David Alan Gilbert") [1909036]
- [scsi] scsi_dh: fix scheduling while atomic and also missing unlock in error path (Mike Snitzer) [1619147]
- [video] hyperv_fb: Fix the cache type when mapping the VRAM (Mohammed Gamal) [1908896]
- [video] hyperv: hyperv_fb: Support deferred IO for Hyper-V frame buffer driver (Mohammed Gamal) [1908896]
- [scsi] target: iscsi: Fix cmd abort fabric stop race (Maurizio Lombardi) [1784540]
- [scsi] target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock (Maurizio Lombardi) [1784540]
- [s390] kernel/uv: handle length extension properly (Claudio Imbrenda) [1899172]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.18.1.el7]" date="1611921600">- [fs] nfs: Fix security label length not being reset (Dave Wysochanski) [1917504]
- [target] scsi: Fix XCOPY NAA identifier lookup (Maurizio Lombardi) [1900469] {CVE-2020-28374}
- [ipc] sem.c: fully initialize sem_array before making it visible (Vladis Dronov) [1877264]
- [netdrv] geneve: add transport ports in route lookup for geneve (Sabrina Dubroca) [1885144] {CVE-2020-25645}
- [kernel] perf/core: Fix race in the perf_mmap_close() function (Michael Petlan) [1869936] {CVE-2020-14351}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.19.1.el7]" date="1612872000">- [kernel] watchdog: use nmi registers snapshot in hardlockup handler (Prarit Bhargava) [1916589]
- [nvme] nvmet: allow Keep Alive for Discovery controller (Gopal Tiwari) [1910817]
- [net] netfilter: ctnetlink: add a range check for l3/l4 protonum (Florian Westphal) [1888296] {CVE-2020-25211}
- [net] icmp: randomize the global rate limiter (Antoine Tenart) [1896515] {CVE-2020-25705}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.20.1.el7]" date="1613649600">- [md] Set prev_flush_start and flush_bio in an atomic way (Xiao Ni) [1889372]
- [md] improve variable names in md_flush_request() (Xiao Ni) [1889372]
- [kernel] timer: Fix potential bug in requeue_timers() (Waiman Long) [1914011]
- [x86] kvm: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits (Vitaly Kuznetsov) [1890669]
- [x86] kvm: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Vitaly Kuznetsov) [1890669]
- [md] dm-mirror: fix a crash if the underlying block device doesn't have merge_bvec_fn (Mikulas Patocka) [1916407]
- [gpu] drm/i915: Fix use-after-free when destroying GEM context (Dave Airlie) [1814731] {CVE-2020-7053}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.21.1.el7]" date="1613995200">- [pinctrl] devicetree: Avoid taking direct reference to device name string (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [pinctrl] Delete an error message (Aristeu Rozanski) [1922902] {CVE-2020-0427}
- [tty] vt: keyboard, reorder user buffer handling in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, rename i to kb_func in vt_do_kdgkb_ioctl (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, extend func_buf_lock to readers (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: keyboard, simplify vt_kdgkbsent (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] keyboard, do not speculate on func_table index (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [tty] vt: fix write/write race in ioctl(KDSKBSENT) handler (Aristeu Rozanski) [1896775] {CVE-2020-25656}
- [iommu] amd: return error on real irq alloc failure (Jerry Snitselaar) [1918273]
- [iommu] amd: Set DTE[IntTabLen] to represent 512 IRTEs (Jerry Snitselaar) [1921187]
- [iommu] amd: Increase interrupt remapping table limit to 512 entries (Jerry Snitselaar) [1921187]
- [scsi] lpfc: Fix LUN loss after cable pull (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy) [1875961]
- [scsi] lpfc: Fix ADISC reception terminating login state if a NVME target (Dick Kennedy) [1875961]
- [netdrv] i40e: revert "i40e: don't report link up for a VF who hasn't enabled queues" (Stefan Assmann) [1901064]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
</package>
<package pkgid="5fedadf72af09d7773e9789896e34f029c4a2923a9733400217a6eeea267aa3c" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.31.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.22.1.el7]" date="1615550400">- mm: do not stall register_shrinker() (Rafael Aquini) [1926043]
- sched/rt: Fix PI handling vs. sched_setscheduler() (Phil Auld) [1928082]
- sched/rt: Simplify pull_rt_task() logic and remove .leaf_rt_rq_list (Phil Auld) [1928082]
- sched: Queue RT tasks to head when prio drops (Phil Auld) [1928082]
- sched/core: Use READ_ONCE()/WRITE_ONCE() in move_queued_task()/task_rq_lock() (Phil Auld) [1928082]
- mmc: block: handle complete_work on separate workqueue (Ming Lei) [1918916]
- tcp: fix to update snd_wl1 in bulk receiver fast path (Vladis Dronov) [1929804]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.23.1.el7]" date="1616068800">- tcm_loop: add WQ_MEM_RECLAIM and flush_work (Maurizio Lombardi) [1925652]
- net/mlx4_en: Handle TX error CQE (Alaa Hleihel) [1925691]
- net/mlx4_en: Avoid scheduling restart task if it is already running (Alaa Hleihel) [1925691]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.24.1.el7]" date="1616673600">- scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech) [1930826] {CVE-2021-27365}
- scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech) [1930849] {CVE-2021-27363}
- scsi: iscsi: Restrict sessions and handles to admin capabilities (Chris Leech) [1930807] {CVE-2021-27364}
- redhat: add CI file for kernel-private (Bruno Meneguele)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.25.1.el7]" date="1618315200">- redhat: Enable CKI RT verification for kernel-private (Juri Lelli)
- redhat: Enable CKI RT verification (Juri Lelli)
- RDMA/ipoib: Remove racy Subnet Manager sendonly join checks (Honggang Li) [1922460]
- net: sched: protect against stack overflow in TC act_mirred (Davide Caratti) [1916682]
- floppy: check_events callback should not return a negative number (Jay Shin) [1928576]
- floppy: fix lock_fdc() signal handling (Jay Shin) [1928576]
- ipv6: clean up anycast when an interface is destroyed (Xin Long) [1917700]
- virtio_net: fix virtnet_open and virtnet_probe competing for try_fill_recv (Laurent Vivier) [1895319]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.26.1.el7]" date="1618920000">- selinux: fix deadlock in security_set_bools() (Ondrej Mosnacek) [1939091]
- md: fix md io stats accounting broken (Ming Lei) [1927106]
- redhat: Fix realtime_check for -private (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.27.1.el7]" date="1619611200">- video: hyperv: hyperv_fb: Obtain screen resolution from Hyper-V host (Mohammed Gamal) [1941841]
- Drivers: hv: vmbus: enable VMBus protocol version 5.0 (Mohammed Gamal) [1941841]
- redhat: Add git suffix to realtime_check merge_tree (Juri Lelli)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
</package>
<package pkgid="21f4b43e140cb4c3a3ebe422a34ae618dc260c1bd7d5d81f3506a0c9dc065eed" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.36.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.28.1.el7]" date="1620129600">- i40e: acquire VSI pointer only after VF is initialized (Stefan Assmann) [1886003]
- ACPICA: Store GPE register enable masks upfront (Al Stone) [1883174]
- netfilter: nf_tables: validate NFTA_SET_TABLE parameter (Phil Sutter) [1873171]
- sctp: change to hold/put transport for proto_unreach_timer (Xin Long) [1707184]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.29.1.el7]" date="1620820800">- drm/i915: warn on guc enable about CVE (Dave Airlie) [1935277] {CVE-2020-12362}
- sched: prevent divide by zero error in scale_rt_power() (Phil Auld) [1910763]
- x86/efi: reset the correct tlb_state in efi_switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Turn off IRQs in switch_mm() (Rafael Aquini) [1837531]
- x86/mm, sched/core: Uninline switch_mm() (Rafael Aquini) [1837531]
- x86/mm: Build arch/x86/mm/tlb.c even on !SMP (Rafael Aquini) [1837531]
- hpsa: fix regression issue for old controllers (Joseph Szczypek) [1830268]
- scsi: hpsa: Correct dev cmds outstanding for retried cmds (Joseph Szczypek) [1830268]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.30.1.el7]" date="1621425600">- pf: Prohibit alu ops for pointer types not defining ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Add sanity check for upper ptr_limit (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Simplify alu_limit masking for pointer arithmetic (Jiri Olsa) [1942689] {CVE-2020-27170}
- bpf: Fix off-by-one for area size in creating mask to left (Jiri Olsa) [1942689] {CVE-2020-27170}
- netxen_nic: fix MSI/MSI-x interrupts (Tony Camuso) [1894274]
- block: fix use-after-free on cached last_lookup partition (Ming Lei) [1898596]
- mm: reduce struct page_cgroup overhead when page_owner is not enabled (Rafael Aquini) [1948451]
- vt: selection, close sel_buffer race (Chris von Recklinghausen) [1831034] {CVE-2020-8648}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.31.1.el7]" date="1622030400">- mm/userfaultfd: do not access vma-&gt;vm_mm after calling handle_userfault() (Philipp Rudo) [1917840]
- scsi: qla2xxx: Fix the call trace for flush workqueue (Nilesh Javali) [1937945]
- futex: Handle faults correctly for PI futexes (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Provide and use pi_state_update_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Replace pointless printk in fixup_owner() (Donghai Qiao) [1935108] {CVE-2021-3347}
- futex: Ensure the correct return value from futex_lock_pi() (Donghai Qiao) [1935108] {CVE-2021-3347}
- scsi: qla2xxx: Remove WARN_ON_ONCE in qla2x00_status_cont_entry() (Nilesh Javali) [1933784]
- scsi: zfcp: add handling for FCP_RESID_OVER to the fcp ingress path (Philipp Rudo) [1917839]
- net: netfilter: Avoid deadlock when loading logger backend (Phil Sutter) [1858329]
- net: netfilter: Link nfnetlink into bzImage (Phil Sutter) [1858329]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.2.el7]" date="1625659201">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]</changelog>
</package>
<package pkgid="82545a1a86256ab6c98df2f5f1f2d1a07ceeedb19b3f6244eb2dbe692a51c396" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.41.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.32.1.el7]" date="1623240000">- Bluetooth: verify AMP hci_chan before amp_destroy (Gopal Tiwari) [1962532] {CVE-2021-33034}
- net: ipv4: route: Fix sending IGMP messages with link address (Hangbin Liu) [1958339]
- hv_netvsc: remove ndo_poll_controller (Mohammed Gamal) [1953075]
- Fix double free in nvme_trans_log_temperature (Gopal Tiwari) [1946793]
- rcu: Call touch_nmi_watchdog() while printing stall warnings (Artem Savkov) [1924688]
- sched/fair: Use RCU accessors consistently for -&gt;numa_group (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/fair: Don't free p-&gt;numa_faults with concurrent readers (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Simplify task_numa_compare() (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Fix task_numa_free() lockdep splat (Rafael Aquini) [1915635] {CVE-2019-20934}
- sched/numa: Move task_numa_free() to __put_task_struct() (Rafael Aquini) [1915635] {CVE-2019-20934}
- [s390] s390/dasd: fix diag 0x250 inline assembly (Philipp Rudo) [1910395]
- vsock/vmci: log once the failed queue pair allocation (Stefano Garzarella) [1892237]
- VMCI: Stop log spew when qp allocation isn't possible (Stefano Garzarella) [1892237]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.33.1.el7]" date="1623931200">- CI: Disable result checking for realtime check (Veronika Kabatova)
- CI: Explicitly disable result checking for private CI (Veronika Kabatova)
- CI: Rename variable (Veronika Kabatova)
- mm: memcontrol: switch to rcu protection in drain_all_stock() (Waiman Long) [1957719]
- sctp: Don't add the shutdown timer if its already been added (Xin Long) [1953052]
- media: xirlink_cit: add missing descriptor sanity checks (Mark Langsdorf) [1826877] {CVE-2020-11668}</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
</package>
<package pkgid="ffbf0a905956387d6ab931c7ba468f61e643c37fea18cf0fe3981cc1cd123dc7" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.42.2.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.34.1.el7]" date="1624363200">- futex: remove lockdep_assert_held() in pi_state_update_owner() (Donghai Qiao) [1965495]
- video: hyperv_fb: Add ratelimit on error message (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Increase wait time for VMbus unload (Mohammed Gamal) [1957803]
- Drivers: hv: vmbus: Initialize unload_event statically (Mohammed Gamal) [1957803]
- blk-mq: always allow reserved allocation in hctx_may_queue (Ming Lei) [1926825]
- s390/pci: fix out of bounds access during irq setup (Philipp Rudo) [1917943]
- s390/pci: improve irq number check for msix (Philipp Rudo) [1917943]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.35.1.el7]" date="1624968000">- CI: Merge configuration (Veronika Kabatova)
- [pci/aer] Work around use-after-free in pcie_do_fatal_recovery() (Al Stone) [1933663]
- [pci/aer] do not invoke error recovery with non-fatal errors (Al Stone) [1933663]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.36.1.el7]" date="1625659200">- cipso,calipso: resolve a number of problems with the DOI refcounts (Antoine Tenart) [1967720]
- net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Alaa Hleihel) [1962406]
- sched/debug: Fix cgroup_path[] serialization (Waiman Long) [1912221]
- sched/debug: Reset watchdog on all CPUs while processing sysrq-t (Waiman Long) [1912221]
- vt: vt_ioctl: fix use-after-free in vt_in_use() (Vladis Dronov) [1872778]
- vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console (Vladis Dronov) [1872778]
- vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines (Vladis Dronov) [1872778]
- vt: selection, introduce vc_is_sel (Vladis Dronov) [1872778]
- redhat: genspec: generate changelog entries since last release (Augusto Caringi)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
</package>
<package pkgid="939db69ae0e558775b9c12241cad4925c9084dcaacdc6312b39a10c64043c7f3" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.45.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.37.1.el7]" date="1626264000">- bluetooth: eliminate the potential race condition when removing the HCI controller (Gopal Tiwari) [1971457]
- net: Update window_clamp if SOCK_RCVBUF is set (Balazs Nemeth) [1962196]
- bpf, x86: Validate computation of branch displacements for x86-64 (Jiri Olsa) [1947249] {CVE-2021-29154}
- mm: vmalloc: add cond_resched() in __vunmap() (Rafael Aquini) [1896794]
- mm/vmalloc: __vmalloc_area_node(): avoid 32-bit overflow (Rafael Aquini) [1896794]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.38.1.el7]" date="1626955200">- seq_file: Disallow extremely large seq buffer allocations (Ian Kent) [1975251]
- memcg, slab: Fix incorrect placement of rcu_head in struct memcg_cache_params (Waiman Long) [1951810]
- netfilter: x_tables: Use correct memory barriers. (Phil Sutter) [1949087] {CVE-2021-29650}
- netfilter: nf_nat: don't bug when mapping already exists (Florian Westphal) [1972970]
- netfilter: don't setup nat info for confirmed ct (Florian Westphal) [1972970]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.39.1.el7]" date="1627473600">- netfilter: x_tables: fix compat match/target pad out-of-bound write (Florian Westphal) [1980489] {CVE-2021-22555}
- Revert "be2net: disable bh with spin_lock in be_process_mcc" (Petr Oros) [1971744]
- futex: futex_requeue can potentially free the pi_state structure twice (Donghai Qiao) [1966856]
- xfs: sync lazy sb accounting on quiesce of read-only mounts (Carlos Maiolino) [1921551]
- scsi: lpfc: Fix crash caused by switch reboot (Dick Kennedy) [1897576]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.40.1.el7]" date="1628164800">- redhat: ppc64: CONFIG_RTAS_FILTER (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- powerpc/rtas: Restrict RTAS requests from userspace (Aristeu Rozanski) [1906443] {CVE-2020-27777}
- IB/mlx5: Fix initializing CQ fragments buffer (Alaa Hleihel) [1962499]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
</package>
<package pkgid="f4d8a0fea508c8e1277f8a1c723235162e0202c120f42e46061f45862d5a8c72" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.49.1.el7"/>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.41.1.el7]" date="1629115200">- ixgbe: fix warning: sysfs: cannot create duplicate filename (Daniel Vacek) [1915449]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.1.el7]" date="1629979200">- [s390] s390/dasd: fix list corruption of lcu list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix list corruption of pavgroup group list (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: prevent inconsistent LCU device data (Claudio Imbrenda) [1889418]
- [s390] s390/dasd: fix hanging device offline processing (Claudio Imbrenda) [1889418]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.42.2.el7]" date="1630411200">- net_sched: cls_route: remove the right filter from hashtable (Ivan Vecera) [1992926]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.43.1.el7]" date="1631275200">- PCI: hv: Add support for protocol 1.3 and support PCI_BUS_RELATIONS2 (Mohammed Gamal) [1984128]
- PCI: hv: Decouple the func definition in hv_dr_state from VSP message (Mohammed Gamal) [1984128]
- PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary (Mohammed Gamal) [1984128]
- i40e: improve locking of mac_filter_hash (Stefan Assmann) [1993850]
- i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) [1993850]
- i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) [1993850]
- i40e: Remove scheduling while atomic possibility (Stefan Assmann) [1993850]
- scsi: lpfc: Fix pt2pt discovery on SLI3 HBAs (Dick Kennedy) [1922479]
- qed: Disable "MFW indication via attention" SPAM every 5 minutes (Manish Chopra) [1854544]
- NFS: Fix a performance regression caused by buffered IO locking (Benjamin Coddington) [1995649]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
</package>
<package pkgid="68cd5c98a3cc93906342d4269748d5fb942afdbba13d0be8a56542c2d427ad18" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.53.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.44.1.el7]" date="1632139200">- fs: dlm: change handling of reconnects (Bob Peterson) [1834878]
- DLM: fix NULL pointer dereference in send_to_sock() (Bob Peterson) [1834878]
- DLM: fix to reschedule rwork (Bob Peterson) [1834878]
- DLM: fix to use sk_callback_lock correctly (Bob Peterson) [1834878]
- DLM: fix overflow dlm_cb_seq (Bob Peterson) [1834878]
- DLM: fix conversion deadlock when DLM_LKF_NODLCKWT flag is set (Bob Peterson) [1834878]
- DLM: use CF_CLOSE flag to stop dlm_send correctly (Bob Peterson) [1834878]
- DLM: Reanimate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_recoverd_stop and dlm_recoverd (Bob Peterson) [1834878]
- DLM: close othercon at send/receive error (Bob Peterson) [1834878]
- DLM: retry rcom when dlm_wait_function is timed out. (Bob Peterson) [1834878]
- DLM: fix to use sock_mutex correctly in xxx_accept_from_sock (Bob Peterson) [1834878]
- DLM: fix race condition between dlm_send and dlm_recv (Bob Peterson) [1834878]
- DLM: fix double list_del() (Bob Peterson) [1834878]
- DLM: Eliminate CF_WRITE_PENDING flag (Bob Peterson) [1834878]
- KVM: do not allow mapping valid but non-reference-counted pages (Jon Maloy) [1975511]
- vxlan: check return value of gro_cells_init() (Aristeu Rozanski) [1970618]
- KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow (Jon Maloy) [1988218] {CVE-2021-37576}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.45.1.el7]" date="1632484800">- CI: handle RT branches in a single config (Veronika Kabatova)
- CI: Drop private CI config (Veronika Kabatova)
- CI: extend template use (Veronika Kabatova)
- mm: page_counter: mitigate consequences of a page_counter underflow (Scott Wood) [2000973]
- KVM: nSVM: always intercept VMLOAD/VMSAVE when nested(CVE-2021-3656) (Jon Maloy) [1985425] {CVE-2021-3656}
- KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted (Marcelo Tosatti) [1991856]
- KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl (CVE-2021-3653) (Jon Maloy) [1985408] {CVE-2021-3653}
- scsi: qedf: Initiate cleanup for ELS commands as well (Nilesh Javali) [1982702]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.46.1.el7]" date="1633608000">- RDMA/ucma: Rework ucma_migrate_id() to avoid races with destroy (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix locking for ctx-&gt;events_reported (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Fix the locking of ctx-&gt;file (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/cma: Add missing locking to rdma_accept() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Add missing locking around rdma_leave_multicast() (Kamal Heib) [1978075] {CVE-2020-36385}
- RDMA/ucma: Put a lock around every call to the rdma_cm layer (Kamal Heib) [1978075] {CVE-2020-36385}
- nvme-pci: Unblock reset_work on IO failure (Gopal Tiwari) [1981610]
- nvme-pci: Don't disable on timeout in reset state (Gopal Tiwari) [1981610]
- nvme-pci: shutdown on timeout during deletion (Gopal Tiwari) [1981610]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.47.1.el7]" date="1635336000">- PCI: hv: Fix sleep while in non-sleep context when removing child devices from the bus (Mohammed Gamal) [1948961]
- PCI: hv: Remove bus device removal unused refcount/functions (Mohammed Gamal) [1948961]
- PCI: hv: Fix a race condition when removing the device (Mohammed Gamal) [1948961]
- scsi: qla2xxx: Fix use after free in eh_abort path (Nilesh Javali) [1899599]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.48.1.el7]" date="1635940800">- scsi: qedf: Add check to synchronize abort and flush (Nilesh Javali) [1941766]
- scsi: ibmvfc: Reinit target retries (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid move login if fast fail is enabled (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Handle move login failure (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Avoid link down on FS9100 canister reboot (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: don't check for failure from mempool_alloc() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: Use compiler attribute defines instead of __attribute__() (Desnes A. Nunes do Rosario) [1882627]
- scsi: ibmvfc: fix misdefined reserved field in ibmvfc_fcp_rsp_info (Desnes A. Nunes do Rosario) [1882627]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.49.1.el7]" date="1636459200">- NFS: Fix interrupted slots by sending a solo SEQUENCE operation (Scott Mayhew) [2007465]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
</package>
<package pkgid="d446bd52fa869c62695d12e03cc59572d8a616dda0af508e9914532962ebb22e" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.59.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.50.1.el7]" date="1637236800">- tcp: grow window for OOO packets only for SACK flows (Guillaume Nault) [1990665]
- scsi: mpt3sas: Fix unlock imbalance (Tomas Henzl) [2006536]
- pci-hyperv: Fix setting CPU affinity on Azure (Vitaly Kuznetsov) [2019272]
- media: firewire: firedtv-avc: fix a buffer overflow in avc_ca_pmt() (Lucas Zampieri) [1956471] {CVE-2021-42739}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.51.1.el7]" date="1637755200">- mm, fs: Fix do_generic_file_read() error return (Carlos Maiolino) [2020857]
- perf/core: Fix a memory leak in perf_event_parse_addr_filter() (Michael Petlan) [1901932]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.52.1.el7]" date="1638964800">- acpi-cpufreq: Honor _PSD table setting on new AMD CPUs (David Arcari) [2019588]
- x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (David Arcari) [2019218]
- x86/cpu/AMD: Fix erratum 1076 (CPB bit) (David Arcari) [2019218]
- i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Stefan Assmann) [1977246]
- i40e: Fix virtchnl_queue_select bitmap validation (Stefan Assmann) [1977246]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
</package>
<package pkgid="b11c94266c8d1291f623d9b7e9471e2e327ef4d4593c85e5726223dec52bce43" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.6.1.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.1.1.el7]" date="1599220800">- [net] netfilter: conntrack: allow sctp hearbeat after connection re-use (Florian Westphal) [1869751]
- [scsi] scsi: ses: don't ask for diagnostic pages repeatedly during probe (Maurizio Lombardi) [1855324]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.2.1.el7]" date="1600689600">- [edac] EDAC/i10nm: Update driver to support different bus number config register offsets (Aristeu Rozanski) [1840276]
- [edac] EDAC, {skx, i10nm}: Make some configurations CPU model specific (Aristeu Rozanski) [1840276]
- [net] test nouarg before dereferencing zerocopy pointers (Patrick Talbert) [1862273]
- [net] packet: copy user buffers before orphan or clone (Patrick Talbert) [1862273]
- [netdrv] net/mlx5e: Fix deallocation of non-fully init encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Allow concurrent creation of encap entries (Alaa Hleihel) [1874101]
- [netdrv] net/mlx5e: Protect encap hash table with mutex (Alaa Hleihel) [1874101]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.3.1.el7]" date="1601208000">- [net] net-sysfs: Call dev_hold always in rx_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: Call dev_hold always in netdev_queue_add_kobject (Hangbin Liu) [1846454] {CVE-2019-20811}
- [net] net-sysfs: call dev_hold if kobject_init_and_add success (Hangbin Liu) [1846454] {CVE-2019-20811}
- [netdrv] macvlan: Change status when lower device goes down (Hangbin Liu) [1848950]
- [netdrv] macvlan: make operstate and carrier more accurate (Hangbin Liu) [1848950]
- [infiniband] RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Kamal Heib) [1858707]
- [infiniband] RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib) [1858707]
- [net] tcp: limit sk_write_qlen based on sndbuf size (Florian Westphal) [1847765]
- [netdrv] net/mlx5e: Modify uplink state on interface up/down (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Disable esw manager vport correctly (Alaa Hleihel) [1733181]
- [netdrv] net/mlx5: E-Switch, Properly refer to host PF vport as other vport (Alaa Hleihel) [1733181]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.4.1.el7]" date="1601899200">- [block] virtio-blk: handle block_device_operations callbacks after hot unplug (Stefan Hajnoczi) [1811893]
- [scsi] Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Nilesh Javali) [1826127]
- [scsi] scsi: qla2xxx: Fix stale mem access on driver unload (Nilesh Javali) [1826127]
- [scsi] scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Keep track of num of pending flogi (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix race betwen fipvlan request and response path (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Decrease the LL2 MTU size to 2500 (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Check for module unloading bit before processing link update AEN (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Initiator fails to re-login to switch after link down (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Fix crash during sg_reset (Nilesh Javali) [1836443]
- [scsi] scsi: qedf: Stop sending fipvlan request on unload (Nilesh Javali) [1836443]
- [message] scsi: mptscsih: Fix read sense data size (Tomas Henzl) [1829803]
- [scsi] scsi: megaraid_sas: Clear affinity hint (Tomas Henzl) [1828312]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.5.1.el7]" date="1602763200">- [x86] x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs (Myron Stowe) [1849223]
- [kernel] uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression (Oleg Nesterov) [1861396]
- [video] vgacon: Fix for missing check in scrollback handling (Lyude Paul) [1859468] {CVE-2020-14331}
- [pci] hv: Retry PCI bus D0 entry on invalid device state (Mohammed Gamal) [1846667]
- [pci] hv: Fix the PCI HyperV probe failure path to release resource properly (Mohammed Gamal) [1846667]
- [x86] xen: Add call of speculative_store_bypass_ht_init() to PV paths (Vladis Dronov) [1882468]
- [powerpc] powerpc/smp: Use nid as fallback for package_id (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add Power9 scheduler topology (Desnes Augusto Nunes do Rosario) [1826306]
- [kernel] sched: Add a new SD_SHARE_POWERDOMAIN for sched_domain (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] sched, powerpc: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] sched, s390: Create a dedicated topology table (Desnes Augusto Nunes do Rosario) [1826306]
- [s390] s390/topology: Remove call to update_cpu_masks() (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Add cpu_l2_cache_map (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Rework CPU topology construction (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc/smp: Use cpu_to_chip_id() to find core siblings (Desnes Augusto Nunes do Rosario) [1826306]
- [powerpc] powerpc, hotplug: Avoid to touch non-existent cpumasks (Desnes Augusto Nunes do Rosario) [1826306]</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; [3.10.0-1160.6.1.el7]" date="1603281600">- [net] netfilter: nf_queue: place bridge physports into queue_entry struct (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: do not release refcouts until nf_reinject is done (Florian Westphal) [1885682]
- [net] netfilter: nf_queue: make nf_queue_entry_release_refs static (Florian Westphal) [1885682]
- [net] bluetooth: l2cap: Fix calling sk_filter on non-socket based channel (Gopal Tiwari) [1888253] {CVE-2020-12351}
- [net] bluetooth: a2mp: Fix not initializing all members (Gopal Tiwari) [1888797] {CVE-2020-12352}</changelog>
</package>
<package pkgid="3ad47814d6f4d9885a706d2e628799345f7d62247f31c7108231b28cdacf8751" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.62.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.53.1.el7]" date="1639656000">- fuse: fix live lock in fuse_iget() (Miklos Szeredi) [1952046]
- fuse: fix bad inode (Miklos Szeredi) [1952046]
- GFS2: Truncate address space mapping when deleting an inode (Bob Peterson) [1364234]
- gfs2: Fix gfs2_testbit to use clone bitmaps (Bob Peterson) [1364234]
- gfs2: clear buf_in_tr when ending a transaction in sweep_bh_for_rgrps (Bob Peterson) [1364234]
- gfs2: Fix oversight in gfs2_ail1_flush (Bob Peterson) [1364234]
- gfs2: Additional information when gfs2_ail1_flush withdraws (Bob Peterson) [1364234]
- gfs2: leaf_dealloc needs to allocate one more revoke (Bob Peterson) [1364234]
- gfs2: allow journal replay to hold sd_log_flush_lock (Bob Peterson) [1364234]
- gfs2: don't allow releasepage to free bd still used for revokes (Bob Peterson) [1364234]
- gfs2: flesh out delayed withdraw for gfs2_log_flush (Bob Peterson) [1364234]
- gfs2: Do proper error checking for go_sync family of glops functions (Bob Peterson) [1364234]
- gfs2: drain the ail2 list after io errors (Bob Peterson) [1364234]
- gfs2: Withdraw in gfs2_ail1_flush if write_cache_pages fails (Bob Peterson) [1364234]
- gfs2: Do log_flush in gfs2_ail_empty_gl even if ail list is empty (Bob Peterson) [1364234]
- gfs2: Check for log write errors before telling dlm to unlock (Bob Peterson) [1364234]
- gfs2: Prepare to withdraw as soon as an IO error occurs in log write (Bob Peterson) [1364234]
- gfs2: Issue revokes more intelligently (Bob Peterson) [1364234]
- gfs2: Add verbose option to check_journal_clean (Bob Peterson) [1364234]
- gfs2: fix infinite loop when checking ail item count before go_inval (Bob Peterson) [1364234]
- gfs2: Force withdraw to replay journals and wait for it to finish (Bob Peterson) [1364234]
- gfs2: Allow some glocks to be used during withdraw (Bob Peterson) [1364234]
- gfs2: move check_journal_clean to util.c for future use (Bob Peterson) [1364234]
- gfs2: Ignore dlm recovery requests if gfs2 is withdrawn (Bob Peterson) [1364234]
- gfs2: Only complain the first time an io error occurs in quota or log (Bob Peterson) [1364234]
- gfs2: log error reform (Bob Peterson) [1364234]
- gfs2: Rework how rgrp buffer_heads are managed (Bob Peterson) [1364234]
- gfs2: clear ail1 list when gfs2 withdraws (Bob Peterson) [1364234]
- gfs2: Introduce concept of a pending withdraw (Bob Peterson) [1364234]
- gfs2: Return bool from gfs2_assert functions (Bob Peterson) [1364234]
- gfs2: Turn gfs2_consist into void functions (Bob Peterson) [1364234]
- gfs2: Remove usused cluster_wide arguments of gfs2_consist functions (Bob Peterson) [1364234]
- gfs2: Report errors before withdraw (Bob Peterson) [1364234]
- gfs2: Split gfs2_lm_withdraw into two functions (Bob Peterson) [1364234]
- gfs2: Fix incorrect variable name (Bob Peterson) [1364234]
- gfs2: Don't write log headers after file system withdraw (Bob Peterson) [1364234]
- gfs2: clean up iopen glock mess in gfs2_create_inode (Bob Peterson) [1364234]
- gfs2: Close timing window with GLF_INVALIDATE_IN_PROGRESS (Bob Peterson) [1364234]
- gfs2: fix infinite loop in gfs2_ail1_flush on io error (Bob Peterson) [1364234]
- gfs2: Introduce function gfs2_withdrawn (Bob Peterson) [1364234]
- gfs2: replace more printk with calls to fs_info and friends (Bob Peterson) [1364234]
- gfs2: dump fsid when dumping glock problems (Bob Peterson) [1364234]
- gfs2: simplify gfs2_freeze by removing case (Bob Peterson) [1364234]
- gfs2: Rename SDF_SHUTDOWN to SDF_WITHDRAWN (Bob Peterson) [1364234]
- gfs2: Warn when a journal replay overwrites a rgrp with buffers (Bob Peterson) [1364234]
- gfs2: log which portion of the journal is replayed (Bob Peterson) [1364234]
- gfs2: slow the deluge of io error messages (Bob Peterson) [1364234]
- gfs2: Don't withdraw under a spin lock (Bob Peterson) [1364234]
- GFS2: Clear gl_object when deleting an inode in gfs2_delete_inode (Bob Peterson) [1364234]
- gfs2: Use fs_* functions instead of pr_* function where we can (Bob Peterson) [1364234]
- GFS2: Use pr_&lt;level&gt; more consistently (Bob Peterson) [1364234]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.54.1.el7]" date="1641988800">- block: queue lock must be acquired when iterating over rls (Ming Lei) [2029574]
- Bluetooth: use correct lock to prevent UAF of hdev object (Chris von Recklinghausen) [1968211] {CVE-2021-3573}
- xfs: map unwritten blocks in XFS_IOC_{ALLOC,FREE}SP just like fallocate (Carlos Maiolino) [2034857] {CVE-2021-4155}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.55.1.el7]" date="1642507200">- SUNRPC: Fix null rpc_clnt dereference in rpc_task_queued tracepoint (Benjamin Coddington) [2039508]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- net: add READ_ONCE() annotation in __skb_wait_for_more_packets() (Sabrina Dubroca) [2033561]
- efi: Decode IA32/X64 Context Info structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 MS Check structure (Aristeu Rozanski) [1950302]
- efi: Decode additional IA32/X64 Bus Check fields (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Cache, TLB, and Bus Check structures (Aristeu Rozanski) [1950302]
- efi: Decode UEFI-defined IA32/X64 Error Structure GUIDs (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Info Structure (Aristeu Rozanski) [1950302]
- efi: Decode IA32/X64 Processor Error Section (Aristeu Rozanski) [1950302]
- efi: Fix IA32/X64 Processor Error Record definition (Aristeu Rozanski) [1950302]
- HID: core: Sanitize event code and type when mapping input (Aristeu Rozanski) [1920848] {CVE-2020-0465}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.56.1.el7]" date="1643371200">- RDMA/mlx5: Fix access to wrong pointer while performing flush due to error (Kamal Heib) [1984070]
- af_unix: fix garbage collect vs MSG_PEEK (William Zhao) [2031970] {CVE-2021-0920}
- selinux: fix race condition when computing ocontext SIDs (Ondrej Mosnacek) [2040196]
- Bluetooth: fix the erroneous flush_work() order (Chris von Recklinghausen) [1964556] {CVE-2021-3564}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
</package>
<package pkgid="d423019ed189029b32793e9a5cb5d9c9ecb20d3d17efffa0aa44f5650e766ad6" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.66.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.57.1.el7]" date="1643803200">- fix regression in "epoll: Keep a reference on files added to the check list" (Carlos Maiolino) [2042760] {CVE-2020-0466}
- epoll: Keep a reference on files added to the check list (Carlos Maiolino) [2042760] {CVE-2020-0466}
- drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044319] {CVE-2022-0330}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.58.1.el7]" date="1644321600">- Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005687]
- drm/vmwgfx: Fix stale file descriptors on failed usercopy (Dave Airlie) [2047597] {CVE-2022-22942}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.59.1.el7]" date="1645012800">- Revert "Merge: Fix tasks stuck in IO waiting for buffer_head lock" (Rado Vrbovsky) [2030609]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.60.1.el7]" date="1645617600">- svcrdma: Fix leak of svc_rdma_recv_ctxt objects (Benjamin Coddington) [2028740]
- sunrpc: Remove unneeded pointer dereference (Benjamin Coddington) [2028740]
- x86/platform/uv: Add more to secondary CPU kdump info (Frank Ramsay) [2042462]
- [s390] s390/AP: support new dynamic AP bus size limit (Claudio Imbrenda) [1997156]
- CI: Enable baseline realtime checks (Veronika Kabatova)
- CI: Rename pipelines to include release names (Veronika Kabatova)
- RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032075] {CVE-2021-4028}
- fget: clarify and improve __fget_files() implementation (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fget: check that the fd still exists after getting a ref to it (Miklos Szeredi) [2032478] {CVE-2021-4083}
- net: Set fput_needed iff FDPUT_FPUT is set (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs, fdtable: Add fget_task helper (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: add fget_many() and fput_many() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs/file.c: __fget() and dup2() atomicity rules (Miklos Szeredi) [2032478] {CVE-2021-4083}
- vfs: Don't let __fdget_pos() get FMODE_PATH files (Miklos Szeredi) [2032478] {CVE-2021-4083}
- get rid of fget_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- sockfd_lookup_light(): switch to fdget^W^Waway from fget_light (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: __fget_light() can use __fget() in slow path (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget_light() and fget_raw_light() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- fs: factor out common code in fget() and fget_raw() (Miklos Szeredi) [2032478] {CVE-2021-4083}
- introduce __fcheck_files() to fix rcu_dereference_check_fdtable(), kill rcu_my_thread_group_empty() (Miklos Szeredi) [2032478] {CVE-2021-4083}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.61.1.el7]" date="1646654400">- x86/efi: reset the correct tlb_state when returning from efi_switch_mm() (Rafael Aquini) [2055587]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
</package>
<package pkgid="1c2da03e1dcd8f73f436ebcc9476a10d8ca2f2990417ec12b1abd33bd4f20f1b" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.71.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.62.1.el7]" date="1648036800">- cifs: fix handling of DFS links where we can not access all components (Ronnie Sahlberg) [1937304]
- redhat: kernel.spec: install new kernel boot entry in posttrans, not post (Denys Vlasenko) [1893756]
- [s390] s390/cpumf: Support for CPU Measurement Facility CSVN 7 (Mete Durlu) [2048920]
- dm table: fix iterate_devices based device capability checks (Mike Snitzer) [2054743]
- buffer: eliminate the need to call free_more_memory() in __getblk_slow() (Carlos Maiolino) [2030609]
- buffer: grow_dev_page() should use __GFP_NOFAIL for all cases (Carlos Maiolino) [2030609]
- buffer: have alloc_page_buffers() use __GFP_NOFAIL (Carlos Maiolino) [2030609]
- mm: memcg: do not fail __GFP_NOFAIL charges (Rafael Aquini) [2054345]
- mm: filemap: do not drop action modifier flags from the gfp_mask passed to __add_to_page_cache_locked() (Rafael Aquini) [2054345]
- Added ZSTREAM=yes to makefile (Lucas Zampieri)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.63.1.el7]" date="1648641600">- NFSv4: Set the connection timeout to match the lease period (Benjamin Coddington) [2066699]
- SUNRPC: Allow changing of the TCP timeout parameters on the fly (Benjamin Coddington) [2066699]
- SUNRPC: Refactor TCP socket timeout code into a helper function (Benjamin Coddington) [2066699]
- SUNRPC: Remove unused function rpc_get_timeout() (Benjamin Coddington) [2066699]
- kernel/timer: Fix incorrect assertion in requeue_timers() (Waiman Long) [2048502]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.64.1.el7]" date="1649246400">- cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052162] {CVE-2022-0492}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.65.1.el7]" date="1649851200">- CI: Remove deprecated option (Veronika Kabatova)
- RDMA/core: Fix panic when port_pkey_list isn't initialized (Kamal Heib) [2046571]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.66.1.el7]" date="1651060800">- net-sysfs: add check for netdevice being present to speed_show (William Zhao) [2055457]
- CI: Drop baseline runs (Veronika Kabatova)
- perf/x86/intel: Add more Icelake CPUIDs (Michael Petlan) [2072317]
- perf vendor events intel: Add Icelake V1.00 event file (Michael Petlan) [2072317]
- perf vendor events intel: Add core event list for Icelake Server (Michael Petlan) [2072317]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
</package>
<package pkgid="2e3631e786f7943f8a345eeb495540d0971ff2a221a8e4e50bd947db4d7741c0" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.76.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.67.1.el7]" date="1652788800">- mm/rmap.c: explicitly reset vma-&gt;anon_vma in unlink_anon_vmas() (Rafael Aquini) [1824109 2069962]
- mm/rmap.c: don't reuse anon_vma if we just want a copy (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: rb_parent is not necessary in __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: extract __vma_unlink_list() as counterpart for __vma_link_list() (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: __vma_unlink_prev() is not necessary now (Rafael Aquini) [1824109 2069962]
- mm/mmap.c: prev could be retrieved from vma-&gt;vm_prev (Rafael Aquini) [1824109 2069962]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.68.1.el7]" date="1653566400">- libceph: fix potential use-after-free on linger ping and resends (Ilya Dryomov) [2088025]
- xfs: use length to balance duplicate bno buffers in perag rb_tree (Brian Foster) [2050464]
- sock: sock_dequeue_err_skb() needs hard irq safety (Kenneth Yin) [2070408]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.69.1.el7]" date="1654516800">- mm: memcg: charge memsw as well in __GFP_NOFAIL case (Rafael Aquini) [2082564]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.70.1.el7]" date="1655208000">- perf: Fix sys_perf_event_open() race against self (Michael Petlan) [2087954]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
</package>
<package pkgid="c96acb80c4cd34a0be382d3075d2f2c300fc29b5136e9d496cc66495c5f61cd8" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.80.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.71.1.el7]" date="1655294400">- netfilter: nf_tables: disallow non-stateful expression in sets earlier (Phil Sutter) [2093000] {CVE-2022-1966}
- netfilter: nf_tables: fix memory leak if expr init fails (Phil Sutter) [2093000]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
</package>
<package pkgid="444fc9f74554a6b80e0f6810c1028262f7a7c2652769a74b348655ad874d379f" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.81.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.72.1.el7]" date="1656417600">- sched,perf: Fix periodic timers (Valentin Schneider) [2077346]
- sched: debug: Remove the cfs bandwidth timer_active printout (Valentin Schneider) [2077346]
- sched: Cleanup bandwidth timers (Valentin Schneider) [2077346]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.73.1.el7]" date="1657195200">- qede: Reduce verbosity of ptp tx timestamp (Manish Chopra) [2080646]
- RDMA/cma: Fix unbalanced cm_id reference count during address resolve (Kamal Heib) [2085425]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
</package>
<package pkgid="0b9c5734586cae5afa6104b9709ea36db01bc28faa4d727ef82feafe964613ed" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.83.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.74.1.el7]" date="1657713600">- tracing: Fix bad use of igrab in trace_uprobe.c (Oleg Nesterov) [2096884]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.75.1.el7]" date="1658232000">- xfs: fix up non-directory creation in SGID directories (Andrey Albershteyn) [2089360]
- x86/speculation/mmio: Print SMT warning (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- KVM: x86/speculation: Disable Fill buffer clear within guests (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/srbds: Update SRBDS mitigation selection (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- cpu/speculation: Add prototype for cpu_show_srbds() (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/bugs: Group MDS, TAA &amp; Processor MMIO Stale Data mitigations (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation: Add a common function for MD_CLEAR mitigation update (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- Documentation: Add documentation for Processor MMIO Stale Data (Rafael Aquini) [2090249] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
- [s390] s390/zcrypt: use kvmalloc instead of kmalloc for 256k alloc (Mete Durlu) [2072970]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.76.1.el7]" date="1658836800">- sfc: complete the next packet when we receive a timestamp (Íñigo Huguet) [1793280]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.77.1.el7]" date="1662638400">- net/mlx5: Add Fast teardown support (Jay Shin) [2077711]
- net/mlx5: Free IRQs in shutdown path (Jay Shin) [2077711]
- net/mlx5: Change teardown with force mode failure message to warning (Jay Shin) [2077711]
- net/mlx5: Cancel health poll before sending panic teardown command (Jay Shin) [2077711]
- net/mlx5: Add fast unload support in shutdown flow (Jay Shin) [2077711]
- net/mlx5: Expose command polling interface (Jay Shin) [2077711]
- posix-timers: Remove remaining uses of tasklist_lock (Oleg Nesterov) [2115147]
- posix-timers: Use sighand lock instead of tasklist_lock on timer deletion (Oleg Nesterov) [2115147]
- posix-cpu-timers: remove tasklist_lock in posix_cpu_clock_get() (Oleg Nesterov) [2115147]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.78.1.el7]" date="1663243200">- net_sched: cls_route: remove from list when handle is 0 (Davide Caratti) [2121809] {CVE-2022-2588}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
</package>
<package pkgid="d150315bf2bd3ab2b60d9ac8b96afa3217de8a582c724e4612f0e8edcb70d412" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.88.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.79.1.el7]" date="1663848000">- x86/speculation: Add LFENCE to RSB fill sequence (Rafael Aquini) [2115073] {CVE-2022-26373}
- x86/speculation: Protect against userspace-userspace spectreRSB (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: cope with spectre_v2=retpoline cmdline on retbleed-affected Intel CPUs (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- KVM: emulate: do not adjust size of fastop and setcc subroutines (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/speculation: Disable RRSBA behavior (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kexec: Disable RET on kexec (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add Cannon lake to RETBleed affected CPU list (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Enumerate BTC_NO (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/common: Stamp out the stepping madness (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu/amd: Add Spectral Chicken (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Do IBPB fallback check only once (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add retbleed=ibpb (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report Intel retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Enable STIBP for JMP2RET (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Add AMD retbleed= boot parameter (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/bugs: Report AMD retbleed vulnerability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Add magic AMD return-thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Use return-thunk in asm code (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/sev: Avoid using __x86_return_thunk (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix SETcc emulation for return thunks (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86,objtool: Create .return_sites (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Undo return-thunk damage (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/retpoline: Use -mfunction-return (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Move RETPOLINE flags to word 11 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- objtool: Add ELF writing capability (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare asm files for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86: Prepare inline-asm for straight-line-speculation (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Fix fastop function ELF metadata (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/kvm: Move kvm_fastop_exception to .fixup section (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/vdso: Fix vDSO build if a retpoline is emitted (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Carve out CQM features retrieval (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeatures: Re-tabulate the X86_FEATURE definitions (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpufeature: Move processor tracing out of scattered features (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6 (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}
- x86/alternatives: Cleanup DPRINTK macro (Rafael Aquini) [2090227] {CVE-2022-23816 CVE-2022-23825 CVE-2022-29900 CVE-2022-29901}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.80.1.el7]" date="1665230400">- scsi: lpfc: Fix FCP I/O flush functionality for TMF routines (Dick Kennedy) [1969988]
- scsi: lpfc: Fix illegal memory access on Abort IOCBs (Dick Kennedy) [1969988]
- NFS: Fix extra call to dput() in nfs_prime_dcache (Benjamin Coddington) [2117856]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
</package>
<package pkgid="a4f3046d8823aad04f3f256c3ae80bcae4629c8d8ec9be8c69639b03b28eb1f3" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.90.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.81.1.el7]" date="1669291200">- [netdrv] bnxt: don't lock the tx queue from napi poll (Jamie Bainbridge) [2110869]
- [netdrv] bnxt_en: reverse order of TX disable and carrier off (Jamie Bainbridge) [2110869]
- [netdrv] qede: confirm skb is allocated before using (Jamie Bainbridge) [2131145]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.82.1.el7]" date="1670500800">- net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964}
- mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
</package>
<package pkgid="a87fc4ac325b034cfd65cf4853d0e97bc4c9436bfdd7dd99cf799683ac5b347e" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.92.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.83.1.el7]" date="1671451200">- x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158]
- scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337]
- scsi: core: Avoid leaving shost-&gt;last_reset with stale value if EH does not run (Ewan D. Milne) [2128337]
- [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248]
- x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.84.1.el7]" date="1673524800">- blk-mq: fix flush-rq race (Ming Lei) [2088029]
- scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.85.1.el7]" date="1674129600">- sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037]
- sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037]
- sctp: handle errors when updating asoc (Xin Long) [2054037]
- sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037]
- s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
</package>
<package pkgid="94f0afcb35ffb65627aab98bb745e038c0cdb60ebfddfba718ae64c05988df70" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.95.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.86.1.el7]" date="1675339200">- openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- gitlab-ci: use CI templates from production branch (Michael Hofmann)
- mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062]
- mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062]
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062]
- x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.87.1.el7]" date="1676030400">- Revert "openvswitch: fix flow actions reallocation" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- Revert "openvswitch: fix OOB access in reserve_sfa_size()" (Rado Vrbovsky) [2141780] {CVE-2022-2639}
- kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438]
- mm/rmap: Fix anon_vma-&gt;degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703}
- mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703}
- proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378}
- scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105]
- fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}
- fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.88.1.el7]" date="1676721600">- KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838]
- KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838]
- KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.89.1.el7]" date="1677153600">- usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
</package>
<package pkgid="066c3375cb91025b540e85e6eaf3ae73ea590187aa7170206b90b036c236b135" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.99.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.90.1.el7]" date="1679054400">- NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890]
- NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.91.1.el7]" date="1682078400">- target: iscsi: use GFP_NOIO with loopback connections (Maurizio Lombardi) [2181931]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.92.1.el7]" date="1684411200">- packet: fix use-after-free in prb_retire_rx_blk_timer_expired() (Florian Westphal) [2182642]
- x86/bugs: Workaround for incorrectly set X86_BUG_RETBLEED under VMware (Waiman Long) [2189556]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.93.1.el7]" date="1685966400">- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564}
- proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.94.1.el7]" date="1686312000">- netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.95.1.el7]" date="1687521600">- perf/s390x: Align the register list to what we support (Michael Petlan) [2207745]
- Revert "[tools] s390/perf: add perf register support for floating-point registers" (Michael Petlan) [2207745]
- s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745]
- s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.96.1.el7]" date="1688731200">- sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681]
- sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681]
- sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.97.1.el7]" date="1690200000">- net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788}
- netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190]
- netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262]
- netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262]
- netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262]
- netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262]
- netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262]
- netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262]
- netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262]
- netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262]
- netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262]
- netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262]
- netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262]
- netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262]
- netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262]
- netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.98.1.el7]" date="1691064000">- GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450]
- GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-1160.99.1.el7]" date="1691668800">- x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593}
- x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593}</changelog>
</package>
<package pkgid="9592bec79bb07636c758dc08253464c2754499aeab79a4c916d6a29a38df0e2c" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
<package pkgid="76ddb8688a8023b1b04cbd46756c558c518211c34632b793a1886343a8720f70" name="kexec-tools" arch="src">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.1"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-43" date="1571832000">- module-setup: re-fix 99kdumpbase network dependency
- kdumpctl: bail out immediately if host key verification failed</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
</package>
<package pkgid="71fb6c77024b37cd8d84df99e27cdacea5efcdb99bc595ff8f9d7494eb03d2a7" name="kexec-tools" arch="src">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.2"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-44" date="1583755200">- module-setup: Ensure eth devices get IP address for VLAN</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
</package>
<package pkgid="51b37c79e9f20d1d0095e74212eed9fc1272fdaf8f94644ded1fd19949955b4f" name="kexec-tools" arch="src">
  <version epoch="0" ver="2.0.15" rel="51.el7_9.3"/>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-45" date="1584532800">- mkdumprd: Use DUMP_TARGET which printing error message during ssh</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-46" date="1584964800">- Always drop nofail or nobootwait options
- Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-47" date="1585224000">- mkdumprd: don't append noauto to mount option.
- Add NOTE about nr_cpus value on HyperV systems.</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-48" date="1586520000">- dracut-module-setup.sh: ensure cluster info is ready before query.
- dracut-module-setup.sh: improve get_alias()</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-49" date="1587384000">- dracut-module-setup.sh: fix breakage in get_pcs_fence_kdump_nodes().</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-50" date="1590580800">- Revert: Always set vm.zone_reclaim_mode = 3 in kdump kernel</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51" date="1592568000">- Add a new option 'rd.znet_ifname' in order to use it in udev rules</changelog>
  <changelog author="Bhupesh Sharma &lt;bhsharma@redhat.com&gt; 2.0.15-51.1" date="1599480000">- makedumpfile/sadump: Fix a KASLR problem of sadump while kdump is working</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.2" date="1614945600">- kdumpctl: fix a variable expansion in check_fence_kdump_config()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-51.3" date="1619092800">- Throttle kdump reload request triggered by udev event</changelog>
</package>
<package pkgid="0b93edff3c86dc1e83eb3c95dff595cb32a0f56bbc7b90f4a7f6d6b8a5c5bda8" name="krb5" arch="src">
  <version epoch="0" ver="1.15.1" rel="51.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-42" date="1564401600">- Log when non-root ksu authorization fails
- Resolves: #1270927</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-43" date="1564401601">- Correct kpasswd_server description in krb5.conf(5)
- Resolves: #1498347</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401602">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401603">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401604">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
</package>
<package pkgid="4e5a003afa1e14aa64bcde00d3d4012bf3e0348c1c23e74454f60b5ca69e9f03" name="krb5" arch="src">
  <version epoch="0" ver="1.15.1" rel="54.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-44" date="1564401600">- Address some optimized-out memset() calls
- Resolves: #1663506</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401601">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401602">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
</package>
<package pkgid="44dcefb61fbce89284e1cc23403a922b7174ce99ac2a4194af257752ee3461d7" name="krb5" arch="src">
  <version epoch="0" ver="1.15.1" rel="55.el7_9"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-45" date="1564401600">- Install kerberos(7)
- Resolves: #1704726</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-46" date="1564401601">- Add pkinit_cert_match support
- Resolves: #1656126</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-47" date="1586174400">- Do expiration warnings for all init_creds APIs
- Resolves: #1733289</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-48" date="1586174401">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-49" date="1586174402">- Fix LDAP policy enforcement of pw_expiration
- Resolves: #1782492</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-50" date="1586174403">- Disable smoke tests on s390x and remove sleep
- Resolves: #1782492</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.15.1-51" date="1634731200">- Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
- Resolves: #1997599</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-53" date="1649332800">- Backport usage of SHA-256 instead of SHA-1 for PKINIT CMS digest
- Resolves: #2066319</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-54" date="1651060800">- Try harder to avoid password change replay errors
- Resolves: #2063163</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.15.1-55" date="1667908800">- Fix integer overflows in PAC parsing (CVE-2022-42898)
- Resolves: rhbz#2140961</changelog>
</package>
<package pkgid="2d72feff67309bdf9b5a1fddd15f41946c778401902ba1e6532f339a23dc41bb" name="ksh" arch="src">
  <version epoch="0" ver="20120801" rel="143.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-35" date="1506340800">- Fix warning while creating kia file
  Resolves: #1438045</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-36" date="1506340801">- Fix setting terminal foreground process group while resuming process
  Resolves: #1457990</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-37" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 20120801-137" date="1518782400">- Increase the release number by 100 to make sure it stays higher than in RHEL-6
  Related: #1484937</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-138" date="1526990400">- Fix a crash due to out of bounds write
  Resolves: #1506347</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-139" date="1527508800">- Fix a crash caused by memcmp()
  Resolves: #1546749</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-140" date="1565784000">- Add virtual provides for /bin/ksh
  Resolves: #1690042</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-141" date="1580212800">- Do not evaluate arithmetic expressions from environment variables at startup
  Resolves: #1790544</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-142" date="1581940800">- Bump version number
  Related: #1790544</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-143" date="1633089600">- Stack robustness fixes
  Related: #2007364</changelog>
</package>
<package pkgid="8f3285f9e89a29d9d017dfd63f27c152d6df09fe281b54b693a2980808425b78" name="ksh" arch="src">
  <version epoch="0" ver="20120801" rel="144.el7_9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-36" date="1506340800">- Fix setting terminal foreground process group while resuming process
  Resolves: #1457990</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-37" date="1516795200">- Add configuration option to enable signal bubbling for backward compatibility
  Resolves: #1484937</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 20120801-137" date="1518782400">- Increase the release number by 100 to make sure it stays higher than in RHEL-6
  Related: #1484937</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-138" date="1526990400">- Fix a crash due to out of bounds write
  Resolves: #1506347</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-139" date="1527508800">- Fix a crash caused by memcmp()
  Resolves: #1546749</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-140" date="1565784000">- Add virtual provides for /bin/ksh
  Resolves: #1690042</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-141" date="1580212800">- Do not evaluate arithmetic expressions from environment variables at startup
  Resolves: #1790544</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 20120801-142" date="1581940800">- Bump version number
  Related: #1790544</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-143" date="1633089600">- Stack robustness fixes
  Related: #2007364</changelog>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 20120801-144" date="1646136000">- Stack robustness additional fixes
  Resolves: #2053503</changelog>
</package>
<package pkgid="1b8a70c6d45fb0f19e984c3c5979ff58e5137a012f2b2f24cdeb2c485e83e535" name="lasso" arch="src">
  <version epoch="0" ver="2.5.1" rel="8.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.4.1-8" date="1441108800">- Add explicit minimum dependency on glib2 2.42,
  for some reason RPM is not automatically detecting the dependency
  Resolves: #1254989</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.0-1" date="1441281600">- Rebase to upstream, now includes our ECP patches, no need to patch any more
  Resolves: #1205342</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-1" date="1465473600">- Rebase to upstream 2.5.1
  Resolves: #1310860</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 2.5.1-2" date="1466164800">- Rebase to upstream 2.5.1
  Resolves: #1310860
- add validate_idp_list_test patch</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-3" date="1549800000">- Resolves: #1634267 - ECP signature check fails with
                       LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
                       instead of response</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-4" date="1563883200">- Resolves: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-5" date="1565092800">- Resolves: #1719014 - Expired certificate prevents tests from running
- Actually apply the patch file for the previous build
- Related: #1730009 - lasso includes "Destination" attribute in SAML
                       AuthnRequest populated with SP
                       AssertionConsumerServiceURL when ECP workflow
                       is used which leads to IdP-side errors</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-6" date="1622635200">- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                       vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-7" date="1622635201">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 2.5.1-8" date="1622635202">- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses</changelog>
</package>
<package pkgid="3749964718f2b2b1e81f1a0294a332395f718c96e30c9081e5254fee9e7b188f" name="leapp" arch="src">
  <version epoch="0" ver="0.11.1" rel="1.el7_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.7.0-2" date="1556539200">- load checkpoints ordered by 'id' instead of timestamp
  Relates: #1636478</changelog>
  <changelog author="Vojtech Sokol &lt;vsokol@redhat.com&gt; - 0.7.0-3" date="1561291200">- Rebuild
  Resolves: #1723113</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.8.0-1" date="1563192000">- Rebase to v0.8.0
  Relates: #1723113
- add the preupgrade subcommand to be able check system and generate report for
  upgrade without run of the upgrade itself
- add checks of arguments for cmdline parameters
- log output of commands to logfile (#520)
- avoid spurious output about missing logger
- exit non-zero on unhandled exceptions and errors
- fix actor library loading, so libraries do not have to be imported in
  lexicographical order
- log on the ERROR level by default instead of DEBUG
- create a dynamic configuration phase that allows creation of configuration
  for repository workflow
- add JSON report generation
- stdlib: add option to `run()` to ignore exit code</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.8.1-1" date="1563969600">- Rebase to v0.8.1
  Relates: #1723113
- Fix issue undefined ReportReference</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.9.0-1" date="1571918400">- Rebase to v0.9.0
- Add sanity-check command for snactor
- Add the /var/log/leapp directory to the leapp RPM
- Handle string types in compatible way
- Introduce answerfile generation &amp; usage
- Introduce report composability, remove renders (#543)
- Show help message for proper subcommand of leapp
- Stop adding 'process-end' audit entry (#538)
- Various fixes in displaying of generated reports
- Resolves: #1753583</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.10.0-1" date="1587038400">- Rebase to v0.10.0
- Add the --enablerepo option for Leapp to use an existing custom yum/dnf
  repository during the upgrade
- Add the --no-rhsm option for Leapp for use without subscription-manager
  (#622)
- Add `leapp answer` to answer Dialog questions in CLI (#592)
- Add `stdin` and `encoding` parameters in the run function (#583, #595)
- Add new dependency on python-requests
- Add the DESKTOP tag for the leapp report (#612)
- Display a warning when leapp is used in an unsupported (devel/testing) mode
  (#577)
- Drop dependency on python-jinja2
- Error messages are now part of the preupgrade report
- Fix json export capabilities using serialization (#598)
- Introduce DialogModel that could be processed by actors to add related
  information into the report (#589)
- Introduce Workflow API (#618)
- Move all leapp and snactor files into related rpms instead of python2-leapp
  (#591)
- Print errors on stdout in pretty format (#593)
- Report inhibitors separately from errors on stdout (#620)
- Show progress in non-verbose executions (#621)
- The verbosity options (--verbose | --debug) are available for leapp commands
  as well
- Resolves: #1821712</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.10.0-2" date="1587384000">- Make debug/verbose setting persistent across the upgrade
- Relates: #1821712</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.10.0-3" date="1596110400">- A temporary build to run TPS tests against
- Relates: #1860373</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.11.0-1" date="1597752000">- Rebase to v0.11.0
- Bump leapp-framework capability to 1.3
- Preserve verbose/debug options during the whole upgrade workflow
- Print the informative error block to the STDOUT instead of STDERR
- Add new reporting tags: `PUBLIC_CLOUD` and `RHUI`
- Add the possibility to skip actor discovery to improve performance of tests when an actor context is injected directly
- Introduce the `deprecated` and `suppress_deprecation` decorators to support the deprecation process
- Store dialog answers in the leapp.db
- Update and improve man pages
- Raising a missing exception with tests failing under py3
- Adde the --actor-config option to `snactor run` to specify a workflow configuration model that should be consumed by actors
- The `call` function has been improved to be working on MacOS
- Known issue: the `suppress_deprecation` decorator causes a traceback in certain cases</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.11.1-1" date="1603281600">- Rebase to v0.11.1
- Fix conversion of deprecation messages to reports
- Fix various issues regarding suppressing of deprecation
- Remove pytest residuals in spec file
- Update documentation and manpages
- Resolves: #1887913</changelog>
</package>
<package pkgid="5187cd7e65dd900bd6568353d021bf97e2d1c85b9f7e92836ff279886a70b21e" name="leapp" arch="src">
  <version epoch="0" ver="0.12.0" rel="1.el7_9"/>
  <changelog author="Vojtech Sokol &lt;vsokol@redhat.com&gt; - 0.7.0-3" date="1561291200">- Rebuild
  Resolves: #1723113</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.8.0-1" date="1563192000">- Rebase to v0.8.0
  Relates: #1723113
- add the preupgrade subcommand to be able check system and generate report for
  upgrade without run of the upgrade itself
- add checks of arguments for cmdline parameters
- log output of commands to logfile (#520)
- avoid spurious output about missing logger
- exit non-zero on unhandled exceptions and errors
- fix actor library loading, so libraries do not have to be imported in
  lexicographical order
- log on the ERROR level by default instead of DEBUG
- create a dynamic configuration phase that allows creation of configuration
  for repository workflow
- add JSON report generation
- stdlib: add option to `run()` to ignore exit code</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.8.1-1" date="1563969600">- Rebase to v0.8.1
  Relates: #1723113
- Fix issue undefined ReportReference</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.9.0-1" date="1571918400">- Rebase to v0.9.0
- Add sanity-check command for snactor
- Add the /var/log/leapp directory to the leapp RPM
- Handle string types in compatible way
- Introduce answerfile generation &amp; usage
- Introduce report composability, remove renders (#543)
- Show help message for proper subcommand of leapp
- Stop adding 'process-end' audit entry (#538)
- Various fixes in displaying of generated reports
- Resolves: #1753583</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.10.0-1" date="1587038400">- Rebase to v0.10.0
- Add the --enablerepo option for Leapp to use an existing custom yum/dnf
  repository during the upgrade
- Add the --no-rhsm option for Leapp for use without subscription-manager
  (#622)
- Add `leapp answer` to answer Dialog questions in CLI (#592)
- Add `stdin` and `encoding` parameters in the run function (#583, #595)
- Add new dependency on python-requests
- Add the DESKTOP tag for the leapp report (#612)
- Display a warning when leapp is used in an unsupported (devel/testing) mode
  (#577)
- Drop dependency on python-jinja2
- Error messages are now part of the preupgrade report
- Fix json export capabilities using serialization (#598)
- Introduce DialogModel that could be processed by actors to add related
  information into the report (#589)
- Introduce Workflow API (#618)
- Move all leapp and snactor files into related rpms instead of python2-leapp
  (#591)
- Print errors on stdout in pretty format (#593)
- Report inhibitors separately from errors on stdout (#620)
- Show progress in non-verbose executions (#621)
- The verbosity options (--verbose | --debug) are available for leapp commands
  as well
- Resolves: #1821712</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.10.0-2" date="1587384000">- Make debug/verbose setting persistent across the upgrade
- Relates: #1821712</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.10.0-3" date="1596110400">- A temporary build to run TPS tests against
- Relates: #1860373</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.11.0-1" date="1597752000">- Rebase to v0.11.0
- Bump leapp-framework capability to 1.3
- Preserve verbose/debug options during the whole upgrade workflow
- Print the informative error block to the STDOUT instead of STDERR
- Add new reporting tags: `PUBLIC_CLOUD` and `RHUI`
- Add the possibility to skip actor discovery to improve performance of tests when an actor context is injected directly
- Introduce the `deprecated` and `suppress_deprecation` decorators to support the deprecation process
- Store dialog answers in the leapp.db
- Update and improve man pages
- Raising a missing exception with tests failing under py3
- Adde the --actor-config option to `snactor run` to specify a workflow configuration model that should be consumed by actors
- The `call` function has been improved to be working on MacOS
- Known issue: the `suppress_deprecation` decorator causes a traceback in certain cases</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.11.1-1" date="1603281600">- Rebase to v0.11.1
- Fix conversion of deprecation messages to reports
- Fix various issues regarding suppressing of deprecation
- Remove pytest residuals in spec file
- Update documentation and manpages
- Resolves: #1887913</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.12.0-1" date="1612440000">- Rebase to v0.12.0
- Bump leapp-framework capability to 1.4
- Add JSON schema of leapp reports for validation
- Add a stable report identifier for each generated report
- Resolves: #1915508</changelog>
</package>
<package pkgid="a35d0138a1ee20c2541759806c3e35b73bd9d2b3904e54caaea566c95c56c8a3" name="leapp" arch="src">
  <version epoch="0" ver="0.12.1" rel="1.el7_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.8.0-1" date="1563192000">- Rebase to v0.8.0
  Relates: #1723113
- add the preupgrade subcommand to be able check system and generate report for
  upgrade without run of the upgrade itself
- add checks of arguments for cmdline parameters
- log output of commands to logfile (#520)
- avoid spurious output about missing logger
- exit non-zero on unhandled exceptions and errors
- fix actor library loading, so libraries do not have to be imported in
  lexicographical order
- log on the ERROR level by default instead of DEBUG
- create a dynamic configuration phase that allows creation of configuration
  for repository workflow
- add JSON report generation
- stdlib: add option to `run()` to ignore exit code</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.8.1-1" date="1563969600">- Rebase to v0.8.1
  Relates: #1723113
- Fix issue undefined ReportReference</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.9.0-1" date="1571918400">- Rebase to v0.9.0
- Add sanity-check command for snactor
- Add the /var/log/leapp directory to the leapp RPM
- Handle string types in compatible way
- Introduce answerfile generation &amp; usage
- Introduce report composability, remove renders (#543)
- Show help message for proper subcommand of leapp
- Stop adding 'process-end' audit entry (#538)
- Various fixes in displaying of generated reports
- Resolves: #1753583</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.10.0-1" date="1587038400">- Rebase to v0.10.0
- Add the --enablerepo option for Leapp to use an existing custom yum/dnf
  repository during the upgrade
- Add the --no-rhsm option for Leapp for use without subscription-manager
  (#622)
- Add `leapp answer` to answer Dialog questions in CLI (#592)
- Add `stdin` and `encoding` parameters in the run function (#583, #595)
- Add new dependency on python-requests
- Add the DESKTOP tag for the leapp report (#612)
- Display a warning when leapp is used in an unsupported (devel/testing) mode
  (#577)
- Drop dependency on python-jinja2
- Error messages are now part of the preupgrade report
- Fix json export capabilities using serialization (#598)
- Introduce DialogModel that could be processed by actors to add related
  information into the report (#589)
- Introduce Workflow API (#618)
- Move all leapp and snactor files into related rpms instead of python2-leapp
  (#591)
- Print errors on stdout in pretty format (#593)
- Report inhibitors separately from errors on stdout (#620)
- Show progress in non-verbose executions (#621)
- The verbosity options (--verbose | --debug) are available for leapp commands
  as well
- Resolves: #1821712</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.10.0-2" date="1587384000">- Make debug/verbose setting persistent across the upgrade
- Relates: #1821712</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.10.0-3" date="1596110400">- A temporary build to run TPS tests against
- Relates: #1860373</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.11.0-1" date="1597752000">- Rebase to v0.11.0
- Bump leapp-framework capability to 1.3
- Preserve verbose/debug options during the whole upgrade workflow
- Print the informative error block to the STDOUT instead of STDERR
- Add new reporting tags: `PUBLIC_CLOUD` and `RHUI`
- Add the possibility to skip actor discovery to improve performance of tests when an actor context is injected directly
- Introduce the `deprecated` and `suppress_deprecation` decorators to support the deprecation process
- Store dialog answers in the leapp.db
- Update and improve man pages
- Raising a missing exception with tests failing under py3
- Adde the --actor-config option to `snactor run` to specify a workflow configuration model that should be consumed by actors
- The `call` function has been improved to be working on MacOS
- Known issue: the `suppress_deprecation` decorator causes a traceback in certain cases</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.11.1-1" date="1603281600">- Rebase to v0.11.1
- Fix conversion of deprecation messages to reports
- Fix various issues regarding suppressing of deprecation
- Remove pytest residuals in spec file
- Update documentation and manpages
- Resolves: #1887913</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.12.0-1" date="1612440000">- Rebase to v0.12.0
- Bump leapp-framework capability to 1.4
- Add JSON schema of leapp reports for validation
- Add a stable report identifier for each generated report
- Resolves: #1915508</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.12.1-1" date="1619179200">- Rebase to v0.12.1
- Added rerun command for experimental purposes to be able to re-run manually
  the last phase when needed (experimental)
- Resolves: #1952885</changelog>
</package>
<package pkgid="e68853e299652029b75709ddf13e32cda663d30510c9b9bd989d945a341b35be" name="leapp" arch="src">
  <version epoch="0" ver="0.13.0" rel="1.el7_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.8.1-1" date="1563969600">- Rebase to v0.8.1
  Relates: #1723113
- Fix issue undefined ReportReference</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.9.0-1" date="1571918400">- Rebase to v0.9.0
- Add sanity-check command for snactor
- Add the /var/log/leapp directory to the leapp RPM
- Handle string types in compatible way
- Introduce answerfile generation &amp; usage
- Introduce report composability, remove renders (#543)
- Show help message for proper subcommand of leapp
- Stop adding 'process-end' audit entry (#538)
- Various fixes in displaying of generated reports
- Resolves: #1753583</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.10.0-1" date="1587038400">- Rebase to v0.10.0
- Add the --enablerepo option for Leapp to use an existing custom yum/dnf
  repository during the upgrade
- Add the --no-rhsm option for Leapp for use without subscription-manager
  (#622)
- Add `leapp answer` to answer Dialog questions in CLI (#592)
- Add `stdin` and `encoding` parameters in the run function (#583, #595)
- Add new dependency on python-requests
- Add the DESKTOP tag for the leapp report (#612)
- Display a warning when leapp is used in an unsupported (devel/testing) mode
  (#577)
- Drop dependency on python-jinja2
- Error messages are now part of the preupgrade report
- Fix json export capabilities using serialization (#598)
- Introduce DialogModel that could be processed by actors to add related
  information into the report (#589)
- Introduce Workflow API (#618)
- Move all leapp and snactor files into related rpms instead of python2-leapp
  (#591)
- Print errors on stdout in pretty format (#593)
- Report inhibitors separately from errors on stdout (#620)
- Show progress in non-verbose executions (#621)
- The verbosity options (--verbose | --debug) are available for leapp commands
  as well
- Resolves: #1821712</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.10.0-2" date="1587384000">- Make debug/verbose setting persistent across the upgrade
- Relates: #1821712</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.10.0-3" date="1596110400">- A temporary build to run TPS tests against
- Relates: #1860373</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.11.0-1" date="1597752000">- Rebase to v0.11.0
- Bump leapp-framework capability to 1.3
- Preserve verbose/debug options during the whole upgrade workflow
- Print the informative error block to the STDOUT instead of STDERR
- Add new reporting tags: `PUBLIC_CLOUD` and `RHUI`
- Add the possibility to skip actor discovery to improve performance of tests when an actor context is injected directly
- Introduce the `deprecated` and `suppress_deprecation` decorators to support the deprecation process
- Store dialog answers in the leapp.db
- Update and improve man pages
- Raising a missing exception with tests failing under py3
- Adde the --actor-config option to `snactor run` to specify a workflow configuration model that should be consumed by actors
- The `call` function has been improved to be working on MacOS
- Known issue: the `suppress_deprecation` decorator causes a traceback in certain cases</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.11.1-1" date="1603281600">- Rebase to v0.11.1
- Fix conversion of deprecation messages to reports
- Fix various issues regarding suppressing of deprecation
- Remove pytest residuals in spec file
- Update documentation and manpages
- Resolves: #1887913</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.12.0-1" date="1612440000">- Rebase to v0.12.0
- Bump leapp-framework capability to 1.4
- Add JSON schema of leapp reports for validation
- Add a stable report identifier for each generated report
- Resolves: #1915508</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.12.1-1" date="1619179200">- Rebase to v0.12.1
- Added rerun command for experimental purposes to be able to re-run manually
  the last phase when needed (experimental)
- Resolves: #1952885</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.13.0-1" date="1633003200">- Rebase to v0.13.0
- Bump the provided leapp-framework capability to 2.0
- The commands for the leapp tool (e.g. preupgrade, upgrade) are now
  defined in the leapp-repository component
- The leapp tool scans the available CLI commands dynamically
- Resolves: #2015191</changelog>
</package>
<package pkgid="32da645e76b3740af28dbfc4df8c01fc4e155277dc56a4b315012b2477959fa6" name="leapp" arch="src">
  <version epoch="0" ver="0.14.0" rel="1.el7_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.9.0-1" date="1571918400">- Rebase to v0.9.0
- Add sanity-check command for snactor
- Add the /var/log/leapp directory to the leapp RPM
- Handle string types in compatible way
- Introduce answerfile generation &amp; usage
- Introduce report composability, remove renders (#543)
- Show help message for proper subcommand of leapp
- Stop adding 'process-end' audit entry (#538)
- Various fixes in displaying of generated reports
- Resolves: #1753583</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.10.0-1" date="1587038400">- Rebase to v0.10.0
- Add the --enablerepo option for Leapp to use an existing custom yum/dnf
  repository during the upgrade
- Add the --no-rhsm option for Leapp for use without subscription-manager
  (#622)
- Add `leapp answer` to answer Dialog questions in CLI (#592)
- Add `stdin` and `encoding` parameters in the run function (#583, #595)
- Add new dependency on python-requests
- Add the DESKTOP tag for the leapp report (#612)
- Display a warning when leapp is used in an unsupported (devel/testing) mode
  (#577)
- Drop dependency on python-jinja2
- Error messages are now part of the preupgrade report
- Fix json export capabilities using serialization (#598)
- Introduce DialogModel that could be processed by actors to add related
  information into the report (#589)
- Introduce Workflow API (#618)
- Move all leapp and snactor files into related rpms instead of python2-leapp
  (#591)
- Print errors on stdout in pretty format (#593)
- Report inhibitors separately from errors on stdout (#620)
- Show progress in non-verbose executions (#621)
- The verbosity options (--verbose | --debug) are available for leapp commands
  as well
- Resolves: #1821712</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.10.0-2" date="1587384000">- Make debug/verbose setting persistent across the upgrade
- Relates: #1821712</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.10.0-3" date="1596110400">- A temporary build to run TPS tests against
- Relates: #1860373</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.11.0-1" date="1597752000">- Rebase to v0.11.0
- Bump leapp-framework capability to 1.3
- Preserve verbose/debug options during the whole upgrade workflow
- Print the informative error block to the STDOUT instead of STDERR
- Add new reporting tags: `PUBLIC_CLOUD` and `RHUI`
- Add the possibility to skip actor discovery to improve performance of tests when an actor context is injected directly
- Introduce the `deprecated` and `suppress_deprecation` decorators to support the deprecation process
- Store dialog answers in the leapp.db
- Update and improve man pages
- Raising a missing exception with tests failing under py3
- Adde the --actor-config option to `snactor run` to specify a workflow configuration model that should be consumed by actors
- The `call` function has been improved to be working on MacOS
- Known issue: the `suppress_deprecation` decorator causes a traceback in certain cases</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.11.1-1" date="1603281600">- Rebase to v0.11.1
- Fix conversion of deprecation messages to reports
- Fix various issues regarding suppressing of deprecation
- Remove pytest residuals in spec file
- Update documentation and manpages
- Resolves: #1887913</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.12.0-1" date="1612440000">- Rebase to v0.12.0
- Bump leapp-framework capability to 1.4
- Add JSON schema of leapp reports for validation
- Add a stable report identifier for each generated report
- Resolves: #1915508</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.12.1-1" date="1619179200">- Rebase to v0.12.1
- Added rerun command for experimental purposes to be able to re-run manually
  the last phase when needed (experimental)
- Resolves: #1952885</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.13.0-1" date="1633003200">- Rebase to v0.13.0
- Bump the provided leapp-framework capability to 2.0
- The commands for the leapp tool (e.g. preupgrade, upgrade) are now
  defined in the leapp-repository component
- The leapp tool scans the available CLI commands dynamically
- Resolves: #2015191</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.14.0-1" date="1647604800">- Rebase to v0.14.0
- Bump leapp-framework to 2.2
- Bump leapp-framework-dependencies to 5
- Updated man page
- Added possibility to specify the report format version
- Check the answerfile upon loading and prevent creation of invalid answerfile (rhbz#2029670)
- Dialogs: print the reason field for question in the answerfile
- Introduced new functions in the leapp standard library
- Resolves: rhbz#2065150, rhbz#2029670</changelog>
</package>
<package pkgid="a556238d1713f99c3036805df7dfddb65358baa866a2c880005a00a724016c41" name="leapp" arch="src">
  <version epoch="0" ver="0.15.0" rel="2.el7_9"/>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.10.0-2" date="1587384000">- Make debug/verbose setting persistent across the upgrade
- Relates: #1821712</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.10.0-3" date="1596110400">- A temporary build to run TPS tests against
- Relates: #1860373</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.11.0-1" date="1597752000">- Rebase to v0.11.0
- Bump leapp-framework capability to 1.3
- Preserve verbose/debug options during the whole upgrade workflow
- Print the informative error block to the STDOUT instead of STDERR
- Add new reporting tags: `PUBLIC_CLOUD` and `RHUI`
- Add the possibility to skip actor discovery to improve performance of tests when an actor context is injected directly
- Introduce the `deprecated` and `suppress_deprecation` decorators to support the deprecation process
- Store dialog answers in the leapp.db
- Update and improve man pages
- Raising a missing exception with tests failing under py3
- Adde the --actor-config option to `snactor run` to specify a workflow configuration model that should be consumed by actors
- The `call` function has been improved to be working on MacOS
- Known issue: the `suppress_deprecation` decorator causes a traceback in certain cases</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.11.1-1" date="1603281600">- Rebase to v0.11.1
- Fix conversion of deprecation messages to reports
- Fix various issues regarding suppressing of deprecation
- Remove pytest residuals in spec file
- Update documentation and manpages
- Resolves: #1887913</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.12.0-1" date="1612440000">- Rebase to v0.12.0
- Bump leapp-framework capability to 1.4
- Add JSON schema of leapp reports for validation
- Add a stable report identifier for each generated report
- Resolves: #1915508</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.12.1-1" date="1619179200">- Rebase to v0.12.1
- Added rerun command for experimental purposes to be able to re-run manually
  the last phase when needed (experimental)
- Resolves: #1952885</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.13.0-1" date="1633003200">- Rebase to v0.13.0
- Bump the provided leapp-framework capability to 2.0
- The commands for the leapp tool (e.g. preupgrade, upgrade) are now
  defined in the leapp-repository component
- The leapp tool scans the available CLI commands dynamically
- Resolves: #2015191</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.14.0-1" date="1647604800">- Rebase to v0.14.0
- Bump leapp-framework to 2.2
- Bump leapp-framework-dependencies to 5
- Updated man page
- Added possibility to specify the report format version
- Check the answerfile upon loading and prevent creation of invalid answerfile (rhbz#2029670)
- Dialogs: print the reason field for question in the answerfile
- Introduced new functions in the leapp standard library
- Resolves: rhbz#2065150, rhbz#2029670</changelog>
  <changelog author="Michal Hecko &lt;mhecko@redhat.com&gt; - 0.15.0-1" date="1661342400">- Rebase to v0.15.0
- Bump leapp-framework to 3.1
- Deprecate `reporting.(Tags|Flags)` replaced by `reporting.Groups`
- Fix crashes when processing invalid FQDNs
- Fix the error msg when a leapp CLI command does not exist
- Introduce new report JSON schema v1.2.0 (default: 1.1.0)
- Resolves: rhbz#2090745, rhbz#2101840</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-2" date="1662638400">- Fix the check of missing required answers
- Relates: rhbz#2090745</changelog>
</package>
<package pkgid="a300056a14a14ab4203441d984405c0200d6a86952e17e7c00e687e0ab2a2ff2" name="leapp" arch="src">
  <version epoch="0" ver="0.15.1" rel="1.el7_9"/>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.10.0-3" date="1596110400">- A temporary build to run TPS tests against
- Relates: #1860373</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.11.0-1" date="1597752000">- Rebase to v0.11.0
- Bump leapp-framework capability to 1.3
- Preserve verbose/debug options during the whole upgrade workflow
- Print the informative error block to the STDOUT instead of STDERR
- Add new reporting tags: `PUBLIC_CLOUD` and `RHUI`
- Add the possibility to skip actor discovery to improve performance of tests when an actor context is injected directly
- Introduce the `deprecated` and `suppress_deprecation` decorators to support the deprecation process
- Store dialog answers in the leapp.db
- Update and improve man pages
- Raising a missing exception with tests failing under py3
- Adde the --actor-config option to `snactor run` to specify a workflow configuration model that should be consumed by actors
- The `call` function has been improved to be working on MacOS
- Known issue: the `suppress_deprecation` decorator causes a traceback in certain cases</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.11.1-1" date="1603281600">- Rebase to v0.11.1
- Fix conversion of deprecation messages to reports
- Fix various issues regarding suppressing of deprecation
- Remove pytest residuals in spec file
- Update documentation and manpages
- Resolves: #1887913</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.12.0-1" date="1612440000">- Rebase to v0.12.0
- Bump leapp-framework capability to 1.4
- Add JSON schema of leapp reports for validation
- Add a stable report identifier for each generated report
- Resolves: #1915508</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.12.1-1" date="1619179200">- Rebase to v0.12.1
- Added rerun command for experimental purposes to be able to re-run manually
  the last phase when needed (experimental)
- Resolves: #1952885</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.13.0-1" date="1633003200">- Rebase to v0.13.0
- Bump the provided leapp-framework capability to 2.0
- The commands for the leapp tool (e.g. preupgrade, upgrade) are now
  defined in the leapp-repository component
- The leapp tool scans the available CLI commands dynamically
- Resolves: #2015191</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.14.0-1" date="1647604800">- Rebase to v0.14.0
- Bump leapp-framework to 2.2
- Bump leapp-framework-dependencies to 5
- Updated man page
- Added possibility to specify the report format version
- Check the answerfile upon loading and prevent creation of invalid answerfile (rhbz#2029670)
- Dialogs: print the reason field for question in the answerfile
- Introduced new functions in the leapp standard library
- Resolves: rhbz#2065150, rhbz#2029670</changelog>
  <changelog author="Michal Hecko &lt;mhecko@redhat.com&gt; - 0.15.0-1" date="1661342400">- Rebase to v0.15.0
- Bump leapp-framework to 3.1
- Deprecate `reporting.(Tags|Flags)` replaced by `reporting.Groups`
- Fix crashes when processing invalid FQDNs
- Fix the error msg when a leapp CLI command does not exist
- Introduce new report JSON schema v1.2.0 (default: 1.1.0)
- Resolves: rhbz#2090745, rhbz#2101840</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-2" date="1662638400">- Fix the check of missing required answers
- Relates: rhbz#2090745</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.1-1" date="1678190400">- Rebase to v0.15.1
- Change DAC for /var/lib/leapp to 0700 to make it accessible for root only
- Propagate error messages from leapp actors to the main leapp process
- Prevent unicode errors when printing error messages
- Resolves: rhbz#2162785</changelog>
</package>
<package pkgid="52eb79776c94ea11b4235c75a17099f17ed34c3da64f5c06a3b009b4fb87da86" name="leapp" arch="src">
  <version epoch="0" ver="0.16.0" rel="1.el7_9"/>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.11.1-1" date="1603281600">- Rebase to v0.11.1
- Fix conversion of deprecation messages to reports
- Fix various issues regarding suppressing of deprecation
- Remove pytest residuals in spec file
- Update documentation and manpages
- Resolves: #1887913</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.12.0-1" date="1612440000">- Rebase to v0.12.0
- Bump leapp-framework capability to 1.4
- Add JSON schema of leapp reports for validation
- Add a stable report identifier for each generated report
- Resolves: #1915508</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.12.1-1" date="1619179200">- Rebase to v0.12.1
- Added rerun command for experimental purposes to be able to re-run manually
  the last phase when needed (experimental)
- Resolves: #1952885</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.13.0-1" date="1633003200">- Rebase to v0.13.0
- Bump the provided leapp-framework capability to 2.0
- The commands for the leapp tool (e.g. preupgrade, upgrade) are now
  defined in the leapp-repository component
- The leapp tool scans the available CLI commands dynamically
- Resolves: #2015191</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.14.0-1" date="1647604800">- Rebase to v0.14.0
- Bump leapp-framework to 2.2
- Bump leapp-framework-dependencies to 5
- Updated man page
- Added possibility to specify the report format version
- Check the answerfile upon loading and prevent creation of invalid answerfile (rhbz#2029670)
- Dialogs: print the reason field for question in the answerfile
- Introduced new functions in the leapp standard library
- Resolves: rhbz#2065150, rhbz#2029670</changelog>
  <changelog author="Michal Hecko &lt;mhecko@redhat.com&gt; - 0.15.0-1" date="1661342400">- Rebase to v0.15.0
- Bump leapp-framework to 3.1
- Deprecate `reporting.(Tags|Flags)` replaced by `reporting.Groups`
- Fix crashes when processing invalid FQDNs
- Fix the error msg when a leapp CLI command does not exist
- Introduce new report JSON schema v1.2.0 (default: 1.1.0)
- Resolves: rhbz#2090745, rhbz#2101840</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-2" date="1662638400">- Fix the check of missing required answers
- Relates: rhbz#2090745</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.1-1" date="1678190400">- Rebase to v0.15.1
- Change DAC for /var/lib/leapp to 0700 to make it accessible for root only
- Propagate error messages from leapp actors to the main leapp process
- Prevent unicode errors when printing error messages
- Resolves: rhbz#2162785</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.1-2" date="1689595200">- Bump leapp-framework to 4.0
- Improve the report summary output to make it more visible
- Fix processing data in remediation instructions with non-ascii characters
- Fix creation of Dialog for Component without choices
- Store tracebacks from actors in leapp.db
- Resolves: rhbz#2223317</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-1" date="1692792000">- Rebase to v0.16.0
- Bump leapp-framework to 5.0
- Improve the report overview to include also information about errors
- Distinguish errors from valid reports in the generated txt report file
- Resolves: rhbz#2223317</changelog>
</package>
<package pkgid="ae987f00057403b0632484343a8404cb5fcaa623f09ae6a4399811b1c76b30ca" name="leapp" arch="src">
  <version epoch="0" ver="0.17.0" rel="1.el7_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.12.1-1" date="1619179200">- Rebase to v0.12.1
- Added rerun command for experimental purposes to be able to re-run manually
  the last phase when needed (experimental)
- Resolves: #1952885</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.13.0-1" date="1633003200">- Rebase to v0.13.0
- Bump the provided leapp-framework capability to 2.0
- The commands for the leapp tool (e.g. preupgrade, upgrade) are now
  defined in the leapp-repository component
- The leapp tool scans the available CLI commands dynamically
- Resolves: #2015191</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.14.0-1" date="1647604800">- Rebase to v0.14.0
- Bump leapp-framework to 2.2
- Bump leapp-framework-dependencies to 5
- Updated man page
- Added possibility to specify the report format version
- Check the answerfile upon loading and prevent creation of invalid answerfile (rhbz#2029670)
- Dialogs: print the reason field for question in the answerfile
- Introduced new functions in the leapp standard library
- Resolves: rhbz#2065150, rhbz#2029670</changelog>
  <changelog author="Michal Hecko &lt;mhecko@redhat.com&gt; - 0.15.0-1" date="1661342400">- Rebase to v0.15.0
- Bump leapp-framework to 3.1
- Deprecate `reporting.(Tags|Flags)` replaced by `reporting.Groups`
- Fix crashes when processing invalid FQDNs
- Fix the error msg when a leapp CLI command does not exist
- Introduce new report JSON schema v1.2.0 (default: 1.1.0)
- Resolves: rhbz#2090745, rhbz#2101840</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-2" date="1662638400">- Fix the check of missing required answers
- Relates: rhbz#2090745</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.1-1" date="1678190400">- Rebase to v0.15.1
- Change DAC for /var/lib/leapp to 0700 to make it accessible for root only
- Propagate error messages from leapp actors to the main leapp process
- Prevent unicode errors when printing error messages
- Resolves: rhbz#2162785</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.1-2" date="1689595200">- Bump leapp-framework to 4.0
- Improve the report summary output to make it more visible
- Fix processing data in remediation instructions with non-ascii characters
- Fix creation of Dialog for Component without choices
- Store tracebacks from actors in leapp.db
- Resolves: rhbz#2223317</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-1" date="1692792000">- Rebase to v0.16.0
- Bump leapp-framework to 5.0
- Improve the report overview to include also information about errors
- Distinguish errors from valid reports in the generated txt report file
- Resolves: rhbz#2223317</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-2" date="1705060800">- Add external links to the text version of the generated report file
- Resolves: RHEL-21450</changelog>
  <changelog author="Toshio Kuratomi &lt;toshio@fedoraproject.org&gt; - - 0.17.0-1" date="1707825600">- Rebase to upstream version v0.17.0.
- Resolves: RHEL-21450</changelog>
</package>
<package pkgid="114181f0c23880e12a5519b53a93a15077d9c3f5cbcca58e41318e3f729ad5b0" name="leapp-repository" arch="src">
  <version epoch="0" ver="0.12.0" rel="2.el7_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.9.0-4" date="1572868800">- Inhibit upgrade on EFI systems when efibootmgr is not installed
  Relates: #1753580</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.9.0-5" date="1572955200">- Do not use efibootmgr on non-efi systems
  Resolves: #1768904</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.10.0-1" date="1587038400">- Rebase to v0.10.0
- Changed upgrade paths: RHEL-ALT 7.6 -&gt; 8.2; RHEL 7.8 -&gt; 8.2
- Add initial multipath support (it doesn't handle all cases yet)
- Use the new framework mechanism to inhibit the upgrade without reporting errors
- Support the upgrade without the use of subscription-manager
- Add dependency on leapp-framework
- Check if the latest installed kernel is booted before the upgrade
- Check that the system satisfies minimum memory requirements
  for the upgrade (#413)
- Do not mount pseudo and unsupposrted FS to overlayfs (e.g. proc)
- Drop leapp sos plugin (it's part of the sos rpm in RHEL 7.7+)
- Evaluate PES events transitively to create correct data for the upgrade
  transaction
- Fix checking of kernel drivers (#400)
- Fix failures caused by local rpms added into the upgrade transaction
- Fix getting mount information with mountpoints with spaces in the path
- Fix handling of XFS without ftype for every such mounted FS
- Fix issue with random booting into old RHEL 7 kernel after the upgrade
- Fix issues on systems with statically mapped IPs in /etc/hosts
- Fix issues with device mapper and udev in a container
- Fix issues with failing rpm transaction calculation because of duplicate
  instructions for dnf
- Fix various issues related to RHSM (including rhbz rhbz#1702691)
- Fix yum repository scan in case of repositories with invalid URL
- Improved report related to KDE/GNOME
- Inhibit the upgrade for ipa-server (#481)
- Inhibit the upgrade if multiple kernel-devel rpms are installed
- Inhibit the upgrade on FIPS systems
- Inhibit the upgrade when links on root dir '/' are not absolute to save the world
- Inhibit the upgrade when the raised dialogs are missing answers (#589)
- Introduce new ways of using custom repositories during the transaction
- Make report messages more explicit about Dialogs (#600)
- Migrate SpamAssassin
- Migrate cups-filters
- Migrate sane-backend
- Modify vim configuration to keep the original behaviour
- Parse correctly kernel cmdline inside the initrd (#383) (fixes various issues on s390x)
- Print warnings instead of a hard failure when expected rpms cannot be found
  (e.g. python3-nss inside an rpm module) (#405)
- Remove java11-openjdk-headless during the upgrade (rhbz#1820172)
- Report changes in wireshark
- The name and baseurl field in the CustomTargetRepository message are optional now
- Throw a nice error when invalid locale is set (#430)
- Various texts are improved based on the feedback
- Resolves: #1821710</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.10.0-2" date="1587384000">- Fixed broken cli output due to printing binary data
- Relates: #1821710</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.11.0-1" date="1597752000">- Rebase to v0.11.0
- Do not crash when the /root/temp_leapp_py3 directory exists (when upgrade is executed multiple times)
  Relates: #1858479
- Do not detect grub device on the s390x architecture (ZIPL is used there)
- Consider the katello rpm being signed by Red Hat
- Omit printing grub binary data on terminal which could break terminal output
- Provide just a single remedition command in the pre-upgrade report to be compatible with Satellite and Cockpit
- Search repository files only in directories used by DNF
- Change supported upgrade paths: RHEL-ALT 7.6 -&gt; 8.2; RHEL 7.9 -&gt; 8.2
- Check whether PAM modules, that are not present on RHEL 8, are used
- Inhibit upgrade when local repositories (referred by file://) are detected
- Introduce actors for migration of Authconfig to Authselect
- Support for an in-place upgrade for z15 machines - s390x architecture
- Update list of removed drivers on RHEL 8
- Resolves: #1860375</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.11.0-2" date="1599048000">- Make possible upgrade with the java-11-openjdk-headless package
- Fix check of local repositories when metalink or mirrorlist is specified
- Relates: #1860375</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.11.0-3" date="1599566400">- Set authselect and PAM actors experimental again
  Relates: #1860375</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.11.0-4" date="1600171200">- Remove java from the upgrade transaction
  Relates: #1860375</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.12.0-1" date="1603281600">- Rebase to v0.12.0
- Enable upgrades on AWS and Azure
- Check usage of removed/deprecated leapp env vars
- Do not inhibit if winbind or wins is used in nsswitch.conf
  (as the issue is fixed in RHEL 8.2)
- Do not remove java from the upgrade transaction
- Fix handling of events with same initial releases and input packages
- Fix mkhomedir issues after authselect conversion
- Fix python macro error in spec file
- Fix storing of logs from initramfs
- Handle migration of authselect and PAM
- Improve remediation instructions for HA clusters
- Make sure "default.target.wants" dir exists
- Resolves: #1887912</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.12.0-2" date="1603627200">- Add actors to migrate Quagga to FRR
- Fixes issues with interrupted leapp during the FirstBoot phase when reload
  of daemons is required
  Resolves: #1883218
- Relates: #1887912</changelog>
</package>
<package pkgid="6b71639a2b89c938350bd79eb4e6bb994d5edc85e6f2f952f9432ffcd71b54ac" name="leapp-repository" arch="src">
  <version epoch="0" ver="0.13.0" rel="2.el7_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.10.0-1" date="1587038400">- Rebase to v0.10.0
- Changed upgrade paths: RHEL-ALT 7.6 -&gt; 8.2; RHEL 7.8 -&gt; 8.2
- Add initial multipath support (it doesn't handle all cases yet)
- Use the new framework mechanism to inhibit the upgrade without reporting errors
- Support the upgrade without the use of subscription-manager
- Add dependency on leapp-framework
- Check if the latest installed kernel is booted before the upgrade
- Check that the system satisfies minimum memory requirements
  for the upgrade (#413)
- Do not mount pseudo and unsupposrted FS to overlayfs (e.g. proc)
- Drop leapp sos plugin (it's part of the sos rpm in RHEL 7.7+)
- Evaluate PES events transitively to create correct data for the upgrade
  transaction
- Fix checking of kernel drivers (#400)
- Fix failures caused by local rpms added into the upgrade transaction
- Fix getting mount information with mountpoints with spaces in the path
- Fix handling of XFS without ftype for every such mounted FS
- Fix issue with random booting into old RHEL 7 kernel after the upgrade
- Fix issues on systems with statically mapped IPs in /etc/hosts
- Fix issues with device mapper and udev in a container
- Fix issues with failing rpm transaction calculation because of duplicate
  instructions for dnf
- Fix various issues related to RHSM (including rhbz rhbz#1702691)
- Fix yum repository scan in case of repositories with invalid URL
- Improved report related to KDE/GNOME
- Inhibit the upgrade for ipa-server (#481)
- Inhibit the upgrade if multiple kernel-devel rpms are installed
- Inhibit the upgrade on FIPS systems
- Inhibit the upgrade when links on root dir '/' are not absolute to save the world
- Inhibit the upgrade when the raised dialogs are missing answers (#589)
- Introduce new ways of using custom repositories during the transaction
- Make report messages more explicit about Dialogs (#600)
- Migrate SpamAssassin
- Migrate cups-filters
- Migrate sane-backend
- Modify vim configuration to keep the original behaviour
- Parse correctly kernel cmdline inside the initrd (#383) (fixes various issues on s390x)
- Print warnings instead of a hard failure when expected rpms cannot be found
  (e.g. python3-nss inside an rpm module) (#405)
- Remove java11-openjdk-headless during the upgrade (rhbz#1820172)
- Report changes in wireshark
- The name and baseurl field in the CustomTargetRepository message are optional now
- Throw a nice error when invalid locale is set (#430)
- Various texts are improved based on the feedback
- Resolves: #1821710</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.10.0-2" date="1587384000">- Fixed broken cli output due to printing binary data
- Relates: #1821710</changelog>
  <changelog author="Michal Bocek &lt;mbocek@redhat.com&gt; - 0.11.0-1" date="1597752000">- Rebase to v0.11.0
- Do not crash when the /root/temp_leapp_py3 directory exists (when upgrade is executed multiple times)
  Relates: #1858479
- Do not detect grub device on the s390x architecture (ZIPL is used there)
- Consider the katello rpm being signed by Red Hat
- Omit printing grub binary data on terminal which could break terminal output
- Provide just a single remedition command in the pre-upgrade report to be compatible with Satellite and Cockpit
- Search repository files only in directories used by DNF
- Change supported upgrade paths: RHEL-ALT 7.6 -&gt; 8.2; RHEL 7.9 -&gt; 8.2
- Check whether PAM modules, that are not present on RHEL 8, are used
- Inhibit upgrade when local repositories (referred by file://) are detected
- Introduce actors for migration of Authconfig to Authselect
- Support for an in-place upgrade for z15 machines - s390x architecture
- Update list of removed drivers on RHEL 8
- Resolves: #1860375</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.11.0-2" date="1599048000">- Make possible upgrade with the java-11-openjdk-headless package
- Fix check of local repositories when metalink or mirrorlist is specified
- Relates: #1860375</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.11.0-3" date="1599566400">- Set authselect and PAM actors experimental again
  Relates: #1860375</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.11.0-4" date="1600171200">- Remove java from the upgrade transaction
  Relates: #1860375</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.12.0-1" date="1603281600">- Rebase to v0.12.0
- Enable upgrades on AWS and Azure
- Check usage of removed/deprecated leapp env vars
- Do not inhibit if winbind or wins is used in nsswitch.conf
  (as the issue is fixed in RHEL 8.2)
- Do not remove java from the upgrade transaction
- Fix handling of events with same initial releases and input packages
- Fix mkhomedir issues after authselect conversion
- Fix python macro error in spec file
- Fix storing of logs from initramfs
- Handle migration of authselect and PAM
- Improve remediation instructions for HA clusters
- Make sure "default.target.wants" dir exists
- Resolves: #1887912</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.12.0-2" date="1603627200">- Add actors to migrate Quagga to FRR
- Fixes issues with interrupted leapp during the FirstBoot phase when reload
  of daemons is required
  Resolves: #1883218
- Relates: #1887912</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.13.0-1" date="1612440000">- Rebase to v0.13.0
- Add actors to migrate Quagga to FRR
- Add stable uniq Key id for every dialog
- Add upgrade support for SAP HANA
- Allow upgrade with SCA enabled manifest
- Fix comparison of the newest installed and booted kernel
- Fix crash due to missing network interfaces during upgrade phases
- Fix error with /boot/efi existing on non-EFI systems
- Fix false positive detection of issue in /etc/default/grub that led into GRUB
  prompt
- Fix remediation command for ipa-server removal
- Fix syntax error in upgrade script
- Inhibit upgrade if multiple kernel-debug pkgs are installed
- Inhibit upgrade on s390x machines with /boot on a separate partition
- Inhibit upgrade with mount options in fstab that break mounting on RHEL 8
- Remove the *leapp-resume* service after the *FirstBoot* phase to prevent kill
  of the leapp process on `systemctl daemon-reload`
- Remove the initial-setup package to avoid it asking for EULA acceptance during
  upgrade
- Require the leapp-framework capability 1.4
- Respect the *kernel-rt* package
- Resolves: #1915509 #1872356 #1873312 #1899455 #1901002 #1905247 #1870813
- Relates: #1901440</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.13.0-2" date="1612440001">- Rebuild
- Relates: #1915509</changelog>
</package>
<package pkgid="5efc265735b9dd310106559f89939ca9f627dae7f3705945c15b340950e2f74b" name="leapp-repository" arch="src">
  <version epoch="0" ver="0.14.0" rel="4.el7_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.11.0-3" date="1599566400">- Set authselect and PAM actors experimental again
  Relates: #1860375</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.11.0-4" date="1600171200">- Remove java from the upgrade transaction
  Relates: #1860375</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.12.0-1" date="1603281600">- Rebase to v0.12.0
- Enable upgrades on AWS and Azure
- Check usage of removed/deprecated leapp env vars
- Do not inhibit if winbind or wins is used in nsswitch.conf
  (as the issue is fixed in RHEL 8.2)
- Do not remove java from the upgrade transaction
- Fix handling of events with same initial releases and input packages
- Fix mkhomedir issues after authselect conversion
- Fix python macro error in spec file
- Fix storing of logs from initramfs
- Handle migration of authselect and PAM
- Improve remediation instructions for HA clusters
- Make sure "default.target.wants" dir exists
- Resolves: #1887912</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.12.0-2" date="1603627200">- Add actors to migrate Quagga to FRR
- Fixes issues with interrupted leapp during the FirstBoot phase when reload
  of daemons is required
  Resolves: #1883218
- Relates: #1887912</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.13.0-1" date="1612440000">- Rebase to v0.13.0
- Add actors to migrate Quagga to FRR
- Add stable uniq Key id for every dialog
- Add upgrade support for SAP HANA
- Allow upgrade with SCA enabled manifest
- Fix comparison of the newest installed and booted kernel
- Fix crash due to missing network interfaces during upgrade phases
- Fix error with /boot/efi existing on non-EFI systems
- Fix false positive detection of issue in /etc/default/grub that led into GRUB
  prompt
- Fix remediation command for ipa-server removal
- Fix syntax error in upgrade script
- Inhibit upgrade if multiple kernel-debug pkgs are installed
- Inhibit upgrade on s390x machines with /boot on a separate partition
- Inhibit upgrade with mount options in fstab that break mounting on RHEL 8
- Remove the *leapp-resume* service after the *FirstBoot* phase to prevent kill
  of the leapp process on `systemctl daemon-reload`
- Remove the initial-setup package to avoid it asking for EULA acceptance during
  upgrade
- Require the leapp-framework capability 1.4
- Respect the *kernel-rt* package
- Resolves: #1915509 #1872356 #1873312 #1899455 #1901002 #1905247 #1870813
- Relates: #1901440</changelog>
  <changelog author="Dominik Rehak &lt;drehak@redhat.com&gt; - 0.13.0-2" date="1612440001">- Rebuild
- Relates: #1915509</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.14.0-1" date="1619179200">- Rebase to v0.14.0
- Added dependency on python-requests on RHEL 7
- Changed supported upgrade paths:
    RHEL-ALT 7.6 -&gt; 8.4
    RHEL 7.9 -&gt; 8.4
    RHEL with SAP 7.7 -&gt; 8.2 (unchanged)
- Download the leapp data from cloud.redhat.com automatically
  when no data are present locally (and system is registered)
- Fix migration of Quagga to FRR on RHEL 8.4
- Inhibit the upgrade if the system uses any drivers dropped
  from the RHEL 8 system
- Resolves: #1952886</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.14.0-2" date="1619524800">- Improve fetching of leapp data files from server (increase timeouts and
  retry multiple times in case of error)
- Relates: #1952886</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.14.0-3" date="1620129600">- Fix handling of errors when fetching leapp data files from server
  Relates: #1952886</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.14.0-4" date="1620907200">- Fix the check of removed non-pci drivers
  Relates: #1952886</changelog>
</package>
<package pkgid="ac658e75e8673743e573049c9d07b4562c59901e483e580f2ba75172f2b7f743" name="leapp-repository" arch="src">
  <version epoch="0" ver="0.15.0" rel="6.el7_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.14.0-1" date="1619179200">- Rebase to v0.14.0
- Added dependency on python-requests on RHEL 7
- Changed supported upgrade paths:
    RHEL-ALT 7.6 -&gt; 8.4
    RHEL 7.9 -&gt; 8.4
    RHEL with SAP 7.7 -&gt; 8.2 (unchanged)
- Download the leapp data from cloud.redhat.com automatically
  when no data are present locally (and system is registered)
- Fix migration of Quagga to FRR on RHEL 8.4
- Inhibit the upgrade if the system uses any drivers dropped
  from the RHEL 8 system
- Resolves: #1952886</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.14.0-2" date="1619524800">- Improve fetching of leapp data files from server (increase timeouts and
  retry multiple times in case of error)
- Relates: #1952886</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.14.0-3" date="1620129600">- Fix handling of errors when fetching leapp data files from server
  Relates: #1952886</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.14.0-4" date="1620907200">- Fix the check of removed non-pci drivers
  Relates: #1952886</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-1" date="1634644800">- Rebase to v0.15.0
- Changed supported upgrade path for: RHEL with SAP 7.9 -&gt; 8.2
- Enable upgrades for SAP on AWS &amp; Azure using RHUI
- The leapp-repository rpm has been renamed to leapp-upgrade-el7toel8
- Provides the leapp-upgrade capability, so all required packages can be installed
  by the `yum install leapp-upgrade` command
- Added a dependency on leapp as the new rpm provides leapp commands
- Bumped leapp-repository-dependencies to 6
- Do not exclude repoids enabled via the --enablerepo option (#623)
- Enforce the `en_US.utf-8` locale when running leapp to prevent various issues
  when a different locale is used on the system
- Enhance the check of required free space on disk for the upgrade
- Fix XFS ftype=0 workaround when "non-XFS" rootfs is present
- Fix detection of XFS partitions without ftype
- Fix handling of /etc/yum.repos.d directory for RHUI
- Fix incorrect mapping of RHEL repositories
- Fix the detection of NFS partitions in /etc/fstab (e.g. when nfs3 or nfs4 is specified)
- Fix the report message when multiple NICs with ethX names are present (#640)
- Fix handling of issues when fetching leapp data files
- Introduce the LEAPP_NO_NETWORK_RENAMING environment variable to leave management
  of NICs names on user when set to '1'; it's wanted e.g. in case a bonding
  is configured on the system
- Add actors to report about PostgresSQL changes
- Make generation of targetuserspace container, upgrade initramfs, and target initramfs more dynamic
- Require the /etc/dasd.conf file only when DASD is used on s390x
- Generate /etc/migration-results upon leapp preupgrade / upgrade execution to inform about status of the upgrade
- Improve the report message when BTRFS is detected
- Inhibit the upgrade if any CIFS entries found in /etc/fstab
- Inhibit the upgrade if any deprecated OpenSSH configuration options / directives are detected
- Inhibit the upgrade when multiple rescue boot entries exist on s390x
- Inhibit the upgrade when x32b and x64b versions of packages are installed
- Introduce hard preservation of leapp packages during the IPU to make the
  upgrade process more protected
- Introduce new system of automatic mapping of RHEL repositories for the in-place
  upgrade based on the repomap.json data file
- Introduce the --channel CLI option to specify the channel (e.g. eus) supposed
  to be used for the upgrade
- Report the problems with target repositories using inhibitors instead of error messages
- Update (or create) the /etc/{yum,dnf}/var/releasever file containing the target
  OS release if exists or RHUI is detected
- Introduced the upgrade/common leapp repository: contains fundamental parts
  generic for all in-place upgrades
- The upgrade/el7toel8 leapp repository contains only stuff related to in-place
  upgrade from RHEL 7 -&gt; RHEL 8
- Resolves: #2015192</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-2" date="1634731200">- Correct the version-release to obsolete previous leapp-repository rpm
- Resolves: #2015192</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-3" date="1634731201">- Correct the version-release to obsolete previous leapp-repository-deps rpm
- Resolves: #2015192</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-4" date="1635336000">- Fix the creation of the answerfile
- Resolves: #2014015</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-5" date="1635336001">- Fix the regression introduced by the new --channel option
- Relates: #2015192</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-6" date="1635336002">- Fix the mapping of repositories on detached systems causing incorrect set
  of installed RHEL 8 packages during the upgrade
  Resolves: #2015578
- Fix the severity of new inhibitors
- Relates: #2015192</changelog>
</package>
<package pkgid="29054e9e458f666883301f658bb205521466c92bf9d3768b32b4802dc796952f" name="leapp-repository" arch="src">
  <version epoch="0" ver="0.16.0" rel="4.el7_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-1" date="1634644800">- Rebase to v0.15.0
- Changed supported upgrade path for: RHEL with SAP 7.9 -&gt; 8.2
- Enable upgrades for SAP on AWS &amp; Azure using RHUI
- The leapp-repository rpm has been renamed to leapp-upgrade-el7toel8
- Provides the leapp-upgrade capability, so all required packages can be installed
  by the `yum install leapp-upgrade` command
- Added a dependency on leapp as the new rpm provides leapp commands
- Bumped leapp-repository-dependencies to 6
- Do not exclude repoids enabled via the --enablerepo option (#623)
- Enforce the `en_US.utf-8` locale when running leapp to prevent various issues
  when a different locale is used on the system
- Enhance the check of required free space on disk for the upgrade
- Fix XFS ftype=0 workaround when "non-XFS" rootfs is present
- Fix detection of XFS partitions without ftype
- Fix handling of /etc/yum.repos.d directory for RHUI
- Fix incorrect mapping of RHEL repositories
- Fix the detection of NFS partitions in /etc/fstab (e.g. when nfs3 or nfs4 is specified)
- Fix the report message when multiple NICs with ethX names are present (#640)
- Fix handling of issues when fetching leapp data files
- Introduce the LEAPP_NO_NETWORK_RENAMING environment variable to leave management
  of NICs names on user when set to '1'; it's wanted e.g. in case a bonding
  is configured on the system
- Add actors to report about PostgresSQL changes
- Make generation of targetuserspace container, upgrade initramfs, and target initramfs more dynamic
- Require the /etc/dasd.conf file only when DASD is used on s390x
- Generate /etc/migration-results upon leapp preupgrade / upgrade execution to inform about status of the upgrade
- Improve the report message when BTRFS is detected
- Inhibit the upgrade if any CIFS entries found in /etc/fstab
- Inhibit the upgrade if any deprecated OpenSSH configuration options / directives are detected
- Inhibit the upgrade when multiple rescue boot entries exist on s390x
- Inhibit the upgrade when x32b and x64b versions of packages are installed
- Introduce hard preservation of leapp packages during the IPU to make the
  upgrade process more protected
- Introduce new system of automatic mapping of RHEL repositories for the in-place
  upgrade based on the repomap.json data file
- Introduce the --channel CLI option to specify the channel (e.g. eus) supposed
  to be used for the upgrade
- Report the problems with target repositories using inhibitors instead of error messages
- Update (or create) the /etc/{yum,dnf}/var/releasever file containing the target
  OS release if exists or RHUI is detected
- Introduced the upgrade/common leapp repository: contains fundamental parts
  generic for all in-place upgrades
- The upgrade/el7toel8 leapp repository contains only stuff related to in-place
  upgrade from RHEL 7 -&gt; RHEL 8
- Resolves: #2015192</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-2" date="1634731200">- Correct the version-release to obsolete previous leapp-repository rpm
- Resolves: #2015192</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-3" date="1634731201">- Correct the version-release to obsolete previous leapp-repository-deps rpm
- Resolves: #2015192</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-4" date="1635336000">- Fix the creation of the answerfile
- Resolves: #2014015</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-5" date="1635336001">- Fix the regression introduced by the new --channel option
- Relates: #2015192</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-6" date="1635336002">- Fix the mapping of repositories on detached systems causing incorrect set
  of installed RHEL 8 packages during the upgrade
  Resolves: #2015578
- Fix the severity of new inhibitors
- Relates: #2015192</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-1" date="1647604800">- Rebase to v0.16.0
- Improve the performance of the leapp execution for "pre first reboot" phases (rhbz#2013564)
- Changed upgrade paths:
  - RHEL 7.9 -&gt; [8.4, 8.6]  (default: 8.6)
  - RHEL with SAP 7.9 -&gt; [8.2, 8.6] (default: 8.2)
- Requires leapp-framework &gt;= 2.2
- Bump leapp-framework-dependencies to 5
- Add detection of enabled YUM plugins (rhbz: #1913829)
- Bind the /run/lock dir into the container in the upgrade initramfs env
- Convert restrictions with IPv6 mask when migrating NTP
- Fix the execution order for the dnf dry run actor to ensure the check is valid
- Fix bug with existing symlinks when migrating YUM configuration files
- Fix generating the target initramfs when additional files and dracut modules are requested to be added
- Fix parsing of sysctl output during the scan of the system (rhbz: #2037843)
- Fix processing of PES data to produce correct instructions for DNF
- Fix scanning "/etc/default/grub" with empty lines
- Fix scanning information about mounted devices
- Handle correctl CUPS and Bind during the upgrade
- Handle upgrading Satellite instances
- Improve and generalize checking of device drivers
- Introduce DNFWorkarounds to register scripts to be executed before DNF run
- Introduce handling of DNF modularity during the upgrade
- Introduce the --report-schema option to control the version of the generated report format
- Introduce the --target option to specify the version of the target system (rhbz#1982127)
- Provide the LEAPP_IPU_IN_PROGRESS environment variable for actors during in-place upgrade
- Warn about docker deprecation when installed
- Zipl: Inhibit the upgrade if boot entries share the same kernel image
- Resolves: rhbz#2065151, rhbz#1913829, rhbz#2037843, rhbz#2013564, rhbz#1982127</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-2" date="1649073600">- Extend the check of deprecated or removed PCI drivers
- Resolves: rhbz#2065151</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-3" date="1650369600">- Fix detection of devices and PCI drivers
- Use correct DNF repositories when upgrading Satellite server
- Resolves: rhbz#2065151</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-4" date="1651060800">- Skip comments in /etc/default/grub during the parsing
- Resolves: rhbz#2065151</changelog>
</package>
<package pkgid="5abf22effd3f026f07acf9e6941fdc49ffee9184182f6c771e59942e0c83a8db" name="leapp-repository" arch="src">
  <version epoch="0" ver="0.16.0" rel="8.el7_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-3" date="1634731200">- Correct the version-release to obsolete previous leapp-repository-deps rpm
- Resolves: #2015192</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-4" date="1635336000">- Fix the creation of the answerfile
- Resolves: #2014015</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-5" date="1635336001">- Fix the regression introduced by the new --channel option
- Relates: #2015192</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-6" date="1635336002">- Fix the mapping of repositories on detached systems causing incorrect set
  of installed RHEL 8 packages during the upgrade
  Resolves: #2015578
- Fix the severity of new inhibitors
- Relates: #2015192</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-1" date="1647604800">- Rebase to v0.16.0
- Improve the performance of the leapp execution for "pre first reboot" phases (rhbz#2013564)
- Changed upgrade paths:
  - RHEL 7.9 -&gt; [8.4, 8.6]  (default: 8.6)
  - RHEL with SAP 7.9 -&gt; [8.2, 8.6] (default: 8.2)
- Requires leapp-framework &gt;= 2.2
- Bump leapp-framework-dependencies to 5
- Add detection of enabled YUM plugins (rhbz: #1913829)
- Bind the /run/lock dir into the container in the upgrade initramfs env
- Convert restrictions with IPv6 mask when migrating NTP
- Fix the execution order for the dnf dry run actor to ensure the check is valid
- Fix bug with existing symlinks when migrating YUM configuration files
- Fix generating the target initramfs when additional files and dracut modules are requested to be added
- Fix parsing of sysctl output during the scan of the system (rhbz: #2037843)
- Fix processing of PES data to produce correct instructions for DNF
- Fix scanning "/etc/default/grub" with empty lines
- Fix scanning information about mounted devices
- Handle correctl CUPS and Bind during the upgrade
- Handle upgrading Satellite instances
- Improve and generalize checking of device drivers
- Introduce DNFWorkarounds to register scripts to be executed before DNF run
- Introduce handling of DNF modularity during the upgrade
- Introduce the --report-schema option to control the version of the generated report format
- Introduce the --target option to specify the version of the target system (rhbz#1982127)
- Provide the LEAPP_IPU_IN_PROGRESS environment variable for actors during in-place upgrade
- Warn about docker deprecation when installed
- Zipl: Inhibit the upgrade if boot entries share the same kernel image
- Resolves: rhbz#2065151, rhbz#1913829, rhbz#2037843, rhbz#2013564, rhbz#1982127</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-2" date="1649073600">- Extend the check of deprecated or removed PCI drivers
- Resolves: rhbz#2065151</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-3" date="1650369600">- Fix detection of devices and PCI drivers
- Use correct DNF repositories when upgrading Satellite server
- Resolves: rhbz#2065151</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-4" date="1651060800">- Skip comments in /etc/default/grub during the parsing
- Resolves: rhbz#2065151</changelog>
  <changelog author="Michal Hecko &lt;mhecko@redhat.com&gt; - 0.16.0-7" date="1657886400">- Fix upgrade failures due to ansible dependencies
- Fix upgrade when satellite-capsule is installed
- Fix PostgreSQL data ownership during the upgrade on satellite servers
- Resolves: rhbz#2087144, rhbz#2089887, rhbz#2104730</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-8" date="1660737600">- Fix migration of PostgreSQL data on satellite servers when data is on a separate
  partition
- Resolves: rhbz#2111835</changelog>
</package>
<package pkgid="cd7445f4f18cc15012d602e1081af0ed825431300a1773ba1806a8ebf648760c" name="leapp-repository" arch="src">
  <version epoch="0" ver="0.17.0" rel="1.el7_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-4" date="1635336000">- Fix the creation of the answerfile
- Resolves: #2014015</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-5" date="1635336001">- Fix the regression introduced by the new --channel option
- Relates: #2015192</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.15.0-6" date="1635336002">- Fix the mapping of repositories on detached systems causing incorrect set
  of installed RHEL 8 packages during the upgrade
  Resolves: #2015578
- Fix the severity of new inhibitors
- Relates: #2015192</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-1" date="1647604800">- Rebase to v0.16.0
- Improve the performance of the leapp execution for "pre first reboot" phases (rhbz#2013564)
- Changed upgrade paths:
  - RHEL 7.9 -&gt; [8.4, 8.6]  (default: 8.6)
  - RHEL with SAP 7.9 -&gt; [8.2, 8.6] (default: 8.2)
- Requires leapp-framework &gt;= 2.2
- Bump leapp-framework-dependencies to 5
- Add detection of enabled YUM plugins (rhbz: #1913829)
- Bind the /run/lock dir into the container in the upgrade initramfs env
- Convert restrictions with IPv6 mask when migrating NTP
- Fix the execution order for the dnf dry run actor to ensure the check is valid
- Fix bug with existing symlinks when migrating YUM configuration files
- Fix generating the target initramfs when additional files and dracut modules are requested to be added
- Fix parsing of sysctl output during the scan of the system (rhbz: #2037843)
- Fix processing of PES data to produce correct instructions for DNF
- Fix scanning "/etc/default/grub" with empty lines
- Fix scanning information about mounted devices
- Handle correctl CUPS and Bind during the upgrade
- Handle upgrading Satellite instances
- Improve and generalize checking of device drivers
- Introduce DNFWorkarounds to register scripts to be executed before DNF run
- Introduce handling of DNF modularity during the upgrade
- Introduce the --report-schema option to control the version of the generated report format
- Introduce the --target option to specify the version of the target system (rhbz#1982127)
- Provide the LEAPP_IPU_IN_PROGRESS environment variable for actors during in-place upgrade
- Warn about docker deprecation when installed
- Zipl: Inhibit the upgrade if boot entries share the same kernel image
- Resolves: rhbz#2065151, rhbz#1913829, rhbz#2037843, rhbz#2013564, rhbz#1982127</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-2" date="1649073600">- Extend the check of deprecated or removed PCI drivers
- Resolves: rhbz#2065151</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-3" date="1650369600">- Fix detection of devices and PCI drivers
- Use correct DNF repositories when upgrading Satellite server
- Resolves: rhbz#2065151</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-4" date="1651060800">- Skip comments in /etc/default/grub during the parsing
- Resolves: rhbz#2065151</changelog>
  <changelog author="Michal Hecko &lt;mhecko@redhat.com&gt; - 0.16.0-7" date="1657886400">- Fix upgrade failures due to ansible dependencies
- Fix upgrade when satellite-capsule is installed
- Fix PostgreSQL data ownership during the upgrade on satellite servers
- Resolves: rhbz#2087144, rhbz#2089887, rhbz#2104730</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-8" date="1660737600">- Fix migration of PostgreSQL data on satellite servers when data is on a separate
  partition
- Resolves: rhbz#2111835</changelog>
  <changelog author="Michal Hecko &lt;mhecko@redhat.com&gt; - 0.17.0-1" date="1661342400">- Rebase to v0.17.0
- The default upgrade path for RHEL SAP is 7.9 -&gt; 8.6
- Provide and require leapp-repository-dependencies 7
- Provide `leapp-command(&lt;CMD&gt;)` for each CLI command provided by leapp-repository
- Require dracut, kmod, procps-ng on RHEL 8+
- Require leapp-framework &gt;= 3.1
- Detect and fix missing newline at the end of /etc/default/grub
- Do not create the upgrade bootloader entry when the dnf dry-run actor stops the upgrade
- Enable in-place upgrade in case LUKS volumes are Ceph OSDs
- Fix SSSD service failing to start after upgrade
- Fix the false positive NFS storage detection on NFS servers and improve the report msg
- Fix the issues on systems with the LANGUAGE environment variable
- Fix the root directory scan to deal with non-utf8 filenames
- Fix various issues when upgrading the Satellite server
- Handle upgrades of SAP Apps systems using RHUI on Azure
- Handle upgrades on RHUI Google Cloud
- Inform about necessary migrations related to bacula-director when installed on the system
- Inhibit the upgrade when /var/lib/leapp being mounted in a non-persistent fashion to prevent failures
- Inhibit the upgrade when /var/lib/leapp mounted with the noexec option to prevent failures
- Make the application of custom selinux rules more reliable and do not override changes done by RPM scriptlets
- Mass refactoring to be compatible with leapp v0.15.0
- PESEventScanner actor has been fully refactored
- Skip comment lines when parsing the GRUB configuration file
- Resolves: rhbz#2090749, rhbz#1836179, rhbz#1885335, rhbz#1917314, rhbz#1937383, rhbz#2036069, rhbz#2071553, rhbz#2072550</changelog>
</package>
<package pkgid="aac250a37996478d3baa013e08ad6a69bbcff33aa5ad5fa1ee689eb8eadb8c08" name="leapp-repository" arch="src">
  <version epoch="0" ver="0.17.0" rel="10.el7_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-1" date="1647604800">- Rebase to v0.16.0
- Improve the performance of the leapp execution for "pre first reboot" phases (rhbz#2013564)
- Changed upgrade paths:
  - RHEL 7.9 -&gt; [8.4, 8.6]  (default: 8.6)
  - RHEL with SAP 7.9 -&gt; [8.2, 8.6] (default: 8.2)
- Requires leapp-framework &gt;= 2.2
- Bump leapp-framework-dependencies to 5
- Add detection of enabled YUM plugins (rhbz: #1913829)
- Bind the /run/lock dir into the container in the upgrade initramfs env
- Convert restrictions with IPv6 mask when migrating NTP
- Fix the execution order for the dnf dry run actor to ensure the check is valid
- Fix bug with existing symlinks when migrating YUM configuration files
- Fix generating the target initramfs when additional files and dracut modules are requested to be added
- Fix parsing of sysctl output during the scan of the system (rhbz: #2037843)
- Fix processing of PES data to produce correct instructions for DNF
- Fix scanning "/etc/default/grub" with empty lines
- Fix scanning information about mounted devices
- Handle correctl CUPS and Bind during the upgrade
- Handle upgrading Satellite instances
- Improve and generalize checking of device drivers
- Introduce DNFWorkarounds to register scripts to be executed before DNF run
- Introduce handling of DNF modularity during the upgrade
- Introduce the --report-schema option to control the version of the generated report format
- Introduce the --target option to specify the version of the target system (rhbz#1982127)
- Provide the LEAPP_IPU_IN_PROGRESS environment variable for actors during in-place upgrade
- Warn about docker deprecation when installed
- Zipl: Inhibit the upgrade if boot entries share the same kernel image
- Resolves: rhbz#2065151, rhbz#1913829, rhbz#2037843, rhbz#2013564, rhbz#1982127</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-2" date="1649073600">- Extend the check of deprecated or removed PCI drivers
- Resolves: rhbz#2065151</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-3" date="1650369600">- Fix detection of devices and PCI drivers
- Use correct DNF repositories when upgrading Satellite server
- Resolves: rhbz#2065151</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-4" date="1651060800">- Skip comments in /etc/default/grub during the parsing
- Resolves: rhbz#2065151</changelog>
  <changelog author="Michal Hecko &lt;mhecko@redhat.com&gt; - 0.16.0-7" date="1657886400">- Fix upgrade failures due to ansible dependencies
- Fix upgrade when satellite-capsule is installed
- Fix PostgreSQL data ownership during the upgrade on satellite servers
- Resolves: rhbz#2087144, rhbz#2089887, rhbz#2104730</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-8" date="1660737600">- Fix migration of PostgreSQL data on satellite servers when data is on a separate
  partition
- Resolves: rhbz#2111835</changelog>
  <changelog author="Michal Hecko &lt;mhecko@redhat.com&gt; - 0.17.0-1" date="1661342400">- Rebase to v0.17.0
- The default upgrade path for RHEL SAP is 7.9 -&gt; 8.6
- Provide and require leapp-repository-dependencies 7
- Provide `leapp-command(&lt;CMD&gt;)` for each CLI command provided by leapp-repository
- Require dracut, kmod, procps-ng on RHEL 8+
- Require leapp-framework &gt;= 3.1
- Detect and fix missing newline at the end of /etc/default/grub
- Do not create the upgrade bootloader entry when the dnf dry-run actor stops the upgrade
- Enable in-place upgrade in case LUKS volumes are Ceph OSDs
- Fix SSSD service failing to start after upgrade
- Fix the false positive NFS storage detection on NFS servers and improve the report msg
- Fix the issues on systems with the LANGUAGE environment variable
- Fix the root directory scan to deal with non-utf8 filenames
- Fix various issues when upgrading the Satellite server
- Handle upgrades of SAP Apps systems using RHUI on Azure
- Handle upgrades on RHUI Google Cloud
- Inform about necessary migrations related to bacula-director when installed on the system
- Inhibit the upgrade when /var/lib/leapp being mounted in a non-persistent fashion to prevent failures
- Inhibit the upgrade when /var/lib/leapp mounted with the noexec option to prevent failures
- Make the application of custom selinux rules more reliable and do not override changes done by RPM scriptlets
- Mass refactoring to be compatible with leapp v0.15.0
- PESEventScanner actor has been fully refactored
- Skip comment lines when parsing the GRUB configuration file
- Resolves: rhbz#2090749, rhbz#1836179, rhbz#1885335, rhbz#1917314, rhbz#1937383, rhbz#2036069, rhbz#2071553, rhbz#2072550</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.17.0-2" date="1668168000">- Fix the upgrade on s390x with ZFCP
- Resolves: #2140563</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.17.0-8" date="1676376000">- Ensure that satellite metapackages are installed after the upgrade
- Satellite: reindex all related databases to fix issues due to new locales in RHEL 8
- Resolves: #2142270</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.17.0-10" date="1677499200">- Re-apply the fix for handling of upgrades on s390x with ZFCP to correctly
  convert the ZIPL configuration to BLS format
- Resolves: #2140563</changelog>
</package>
<package pkgid="e75a1c6a8dd950457102d4df4940f633048c72c1af70adfaeb55b3fa58b1a728" name="leapp-repository" arch="src">
  <version epoch="0" ver="0.18.0" rel="1.el7_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-2" date="1649073600">- Extend the check of deprecated or removed PCI drivers
- Resolves: rhbz#2065151</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-3" date="1650369600">- Fix detection of devices and PCI drivers
- Use correct DNF repositories when upgrading Satellite server
- Resolves: rhbz#2065151</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-4" date="1651060800">- Skip comments in /etc/default/grub during the parsing
- Resolves: rhbz#2065151</changelog>
  <changelog author="Michal Hecko &lt;mhecko@redhat.com&gt; - 0.16.0-7" date="1657886400">- Fix upgrade failures due to ansible dependencies
- Fix upgrade when satellite-capsule is installed
- Fix PostgreSQL data ownership during the upgrade on satellite servers
- Resolves: rhbz#2087144, rhbz#2089887, rhbz#2104730</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-8" date="1660737600">- Fix migration of PostgreSQL data on satellite servers when data is on a separate
  partition
- Resolves: rhbz#2111835</changelog>
  <changelog author="Michal Hecko &lt;mhecko@redhat.com&gt; - 0.17.0-1" date="1661342400">- Rebase to v0.17.0
- The default upgrade path for RHEL SAP is 7.9 -&gt; 8.6
- Provide and require leapp-repository-dependencies 7
- Provide `leapp-command(&lt;CMD&gt;)` for each CLI command provided by leapp-repository
- Require dracut, kmod, procps-ng on RHEL 8+
- Require leapp-framework &gt;= 3.1
- Detect and fix missing newline at the end of /etc/default/grub
- Do not create the upgrade bootloader entry when the dnf dry-run actor stops the upgrade
- Enable in-place upgrade in case LUKS volumes are Ceph OSDs
- Fix SSSD service failing to start after upgrade
- Fix the false positive NFS storage detection on NFS servers and improve the report msg
- Fix the issues on systems with the LANGUAGE environment variable
- Fix the root directory scan to deal with non-utf8 filenames
- Fix various issues when upgrading the Satellite server
- Handle upgrades of SAP Apps systems using RHUI on Azure
- Handle upgrades on RHUI Google Cloud
- Inform about necessary migrations related to bacula-director when installed on the system
- Inhibit the upgrade when /var/lib/leapp being mounted in a non-persistent fashion to prevent failures
- Inhibit the upgrade when /var/lib/leapp mounted with the noexec option to prevent failures
- Make the application of custom selinux rules more reliable and do not override changes done by RPM scriptlets
- Mass refactoring to be compatible with leapp v0.15.0
- PESEventScanner actor has been fully refactored
- Skip comment lines when parsing the GRUB configuration file
- Resolves: rhbz#2090749, rhbz#1836179, rhbz#1885335, rhbz#1917314, rhbz#1937383, rhbz#2036069, rhbz#2071553, rhbz#2072550</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.17.0-2" date="1668168000">- Fix the upgrade on s390x with ZFCP
- Resolves: #2140563</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.17.0-8" date="1676376000">- Ensure that satellite metapackages are installed after the upgrade
- Satellite: reindex all related databases to fix issues due to new locales in RHEL 8
- Resolves: #2142270</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.17.0-10" date="1677499200">- Re-apply the fix for handling of upgrades on s390x with ZFCP to correctly
  convert the ZIPL configuration to BLS format
- Resolves: #2140563</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.18.0-1" date="1678190400">- Rebase to v0.18.0
- Set new upgrade paths RHEL 7.9 -&gt; 8.8, 8.6 (default: 8.8)
- Requires cpio
- Bump leapp-repository-dependencies to 9
- Add breadcrumbs results to RHSM facts unless --no-rhsm-facts is used
- Register subscribed systems automatically to Red Hat Insights unless --no-insights-register is used
- Add leapp RHUI packages to an allowlist to drop confusing reports
- Check RPM signatures during the upgrade
- Check only mounted XFS partitions
- Check the validity and compatitibility of used leapp data
- Detect a proxy configuration in YUM/DNF and adjust an error msg on issues caused by the configuration
- Detect and report systemd symlinks that are broken before the upgrade
- Detect corrupted grubenv file
- Disable the amazon-id DNF plugin on AWS during the upgrade stage to omit error messages during the upgrade process caused by missing network connection
- Do not create new *pyc files when running leapp after the DNF upgrade transaction
- Drop obsoleted upgrade paths
- Enable upgrades on s390x when /boot is part of rootfs
- Ensure that rsyncd stays enabled if it is enabled prior the upgrade
- Ensure the device_cio_free service stays enabled on s390x after the upgrade
- Extend the allow list of RHUI clients by azure-sap-apps to omit confusing report
- Filter out PES events unrelated for the used upgrade path and handle overlapping events
 (fixes upgrades with quagga installed)
- Fix scan of ceph volumes on systems without ceph-osd or when ceph-osd container is not found
- Fix systemd symlinks that become incorrect during the IPU
- Fix the check of memory (RAM) limits and use human readable values in the report
- Fixed checks for RHEL SAP IPU 7.9 -&gt; 8.6
- Fixed migration of ntp to chrony when the ntp service is masked
- Ignore external accounts in /etc/passwd
- Improve remediation instructions for packages in unknown repositories
- Improve the error message to guide users when discovered more space is needed
- Inhibit the upgrade when entries in /etc/fstab cause overshadowing during the upgrade
- Introduced an option to use an ISO file as a target RHEL version content source
- Introduced possibility to specify what systemd services should be enabled/disabled on the upgraded system
- Introduced the --nogpgcheck option to skip checking of RPM signatures
- Map the target repositories also based on the installed content
- Prevent re-run of leapp in the upgrade initramfs in case of previous failure
- Prevent the upgrade with RHSM when Baseos and Appstream target repositories are not discovered
- Prevent the traceback during migration of sendmail configuration files when the package is not installed
- Provide common information about systemd services
- RHUI(Azure) Handle correctly various SAP images
- Remove obsoleted GPG keys provided by RH after the upgrade to prevent errors
- Rework the network configuration handling and parse the configuration data properly
- Set the system release lock after the upgrade also for premium channels
- Small improvements and fixes in various reports
- Resolves: #2143374, #1901440, #1905519, #1972238, #1988449, #1988457, #2014009
- Resolves: #2031098, #2032953, #2055117, #2088491, #2089514, #2110045, #2122712
- Resolves: #2127918, #2158527, #2159288, #2162785, #2163796</changelog>
</package>
<package pkgid="6cce399e65ceb5384bdffdf959ba0d41614acc18afd1ff7e62f9dd50d26d13f5" name="leapp-repository" arch="src">
  <version epoch="0" ver="0.18.0" rel="3.el7_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-4" date="1651060800">- Skip comments in /etc/default/grub during the parsing
- Resolves: rhbz#2065151</changelog>
  <changelog author="Michal Hecko &lt;mhecko@redhat.com&gt; - 0.16.0-7" date="1657886400">- Fix upgrade failures due to ansible dependencies
- Fix upgrade when satellite-capsule is installed
- Fix PostgreSQL data ownership during the upgrade on satellite servers
- Resolves: rhbz#2087144, rhbz#2089887, rhbz#2104730</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.16.0-8" date="1660737600">- Fix migration of PostgreSQL data on satellite servers when data is on a separate
  partition
- Resolves: rhbz#2111835</changelog>
  <changelog author="Michal Hecko &lt;mhecko@redhat.com&gt; - 0.17.0-1" date="1661342400">- Rebase to v0.17.0
- The default upgrade path for RHEL SAP is 7.9 -&gt; 8.6
- Provide and require leapp-repository-dependencies 7
- Provide `leapp-command(&lt;CMD&gt;)` for each CLI command provided by leapp-repository
- Require dracut, kmod, procps-ng on RHEL 8+
- Require leapp-framework &gt;= 3.1
- Detect and fix missing newline at the end of /etc/default/grub
- Do not create the upgrade bootloader entry when the dnf dry-run actor stops the upgrade
- Enable in-place upgrade in case LUKS volumes are Ceph OSDs
- Fix SSSD service failing to start after upgrade
- Fix the false positive NFS storage detection on NFS servers and improve the report msg
- Fix the issues on systems with the LANGUAGE environment variable
- Fix the root directory scan to deal with non-utf8 filenames
- Fix various issues when upgrading the Satellite server
- Handle upgrades of SAP Apps systems using RHUI on Azure
- Handle upgrades on RHUI Google Cloud
- Inform about necessary migrations related to bacula-director when installed on the system
- Inhibit the upgrade when /var/lib/leapp being mounted in a non-persistent fashion to prevent failures
- Inhibit the upgrade when /var/lib/leapp mounted with the noexec option to prevent failures
- Make the application of custom selinux rules more reliable and do not override changes done by RPM scriptlets
- Mass refactoring to be compatible with leapp v0.15.0
- PESEventScanner actor has been fully refactored
- Skip comment lines when parsing the GRUB configuration file
- Resolves: rhbz#2090749, rhbz#1836179, rhbz#1885335, rhbz#1917314, rhbz#1937383, rhbz#2036069, rhbz#2071553, rhbz#2072550</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.17.0-2" date="1668168000">- Fix the upgrade on s390x with ZFCP
- Resolves: #2140563</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.17.0-8" date="1676376000">- Ensure that satellite metapackages are installed after the upgrade
- Satellite: reindex all related databases to fix issues due to new locales in RHEL 8
- Resolves: #2142270</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.17.0-10" date="1677499200">- Re-apply the fix for handling of upgrades on s390x with ZFCP to correctly
  convert the ZIPL configuration to BLS format
- Resolves: #2140563</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.18.0-1" date="1678190400">- Rebase to v0.18.0
- Set new upgrade paths RHEL 7.9 -&gt; 8.8, 8.6 (default: 8.8)
- Requires cpio
- Bump leapp-repository-dependencies to 9
- Add breadcrumbs results to RHSM facts unless --no-rhsm-facts is used
- Register subscribed systems automatically to Red Hat Insights unless --no-insights-register is used
- Add leapp RHUI packages to an allowlist to drop confusing reports
- Check RPM signatures during the upgrade
- Check only mounted XFS partitions
- Check the validity and compatitibility of used leapp data
- Detect a proxy configuration in YUM/DNF and adjust an error msg on issues caused by the configuration
- Detect and report systemd symlinks that are broken before the upgrade
- Detect corrupted grubenv file
- Disable the amazon-id DNF plugin on AWS during the upgrade stage to omit error messages during the upgrade process caused by missing network connection
- Do not create new *pyc files when running leapp after the DNF upgrade transaction
- Drop obsoleted upgrade paths
- Enable upgrades on s390x when /boot is part of rootfs
- Ensure that rsyncd stays enabled if it is enabled prior the upgrade
- Ensure the device_cio_free service stays enabled on s390x after the upgrade
- Extend the allow list of RHUI clients by azure-sap-apps to omit confusing report
- Filter out PES events unrelated for the used upgrade path and handle overlapping events
 (fixes upgrades with quagga installed)
- Fix scan of ceph volumes on systems without ceph-osd or when ceph-osd container is not found
- Fix systemd symlinks that become incorrect during the IPU
- Fix the check of memory (RAM) limits and use human readable values in the report
- Fixed checks for RHEL SAP IPU 7.9 -&gt; 8.6
- Fixed migration of ntp to chrony when the ntp service is masked
- Ignore external accounts in /etc/passwd
- Improve remediation instructions for packages in unknown repositories
- Improve the error message to guide users when discovered more space is needed
- Inhibit the upgrade when entries in /etc/fstab cause overshadowing during the upgrade
- Introduced an option to use an ISO file as a target RHEL version content source
- Introduced possibility to specify what systemd services should be enabled/disabled on the upgraded system
- Introduced the --nogpgcheck option to skip checking of RPM signatures
- Map the target repositories also based on the installed content
- Prevent re-run of leapp in the upgrade initramfs in case of previous failure
- Prevent the upgrade with RHSM when Baseos and Appstream target repositories are not discovered
- Prevent the traceback during migration of sendmail configuration files when the package is not installed
- Provide common information about systemd services
- RHUI(Azure) Handle correctly various SAP images
- Remove obsoleted GPG keys provided by RH after the upgrade to prevent errors
- Rework the network configuration handling and parse the configuration data properly
- Set the system release lock after the upgrade also for premium channels
- Small improvements and fixes in various reports
- Resolves: #2143374, #1901440, #1905519, #1972238, #1988449, #1988457, #2014009
- Resolves: #2031098, #2032953, #2055117, #2088491, #2089514, #2110045, #2122712
- Resolves: #2127918, #2158527, #2159288, #2162785, #2163796</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.18.0-2" date="1683806400">- Include leap data files in the package
- Change the upgrade paths for RHEL with SAP HANA:
      RHEL with SAP HANA 7.9 -&gt; 8.6, 8.8 (default: 8.6)
- Resolves: #2203253</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.18.0-3" date="1685966400">- Update the repomap.json file to address planned changes on RHUI Azure
- Resolves: #2203253</changelog>
</package>
<package pkgid="e593fd8bab4483a49a0c550d3e7fae3762033fb8a46dcc45867b81463b9119ae" name="leapp-repository" arch="src">
  <version epoch="0" ver="0.19.0" rel="1.el7_9"/>
  <changelog author="Michal Hecko &lt;mhecko@redhat.com&gt; - 0.17.0-1" date="1661342400">- Rebase to v0.17.0
- The default upgrade path for RHEL SAP is 7.9 -&gt; 8.6
- Provide and require leapp-repository-dependencies 7
- Provide `leapp-command(&lt;CMD&gt;)` for each CLI command provided by leapp-repository
- Require dracut, kmod, procps-ng on RHEL 8+
- Require leapp-framework &gt;= 3.1
- Detect and fix missing newline at the end of /etc/default/grub
- Do not create the upgrade bootloader entry when the dnf dry-run actor stops the upgrade
- Enable in-place upgrade in case LUKS volumes are Ceph OSDs
- Fix SSSD service failing to start after upgrade
- Fix the false positive NFS storage detection on NFS servers and improve the report msg
- Fix the issues on systems with the LANGUAGE environment variable
- Fix the root directory scan to deal with non-utf8 filenames
- Fix various issues when upgrading the Satellite server
- Handle upgrades of SAP Apps systems using RHUI on Azure
- Handle upgrades on RHUI Google Cloud
- Inform about necessary migrations related to bacula-director when installed on the system
- Inhibit the upgrade when /var/lib/leapp being mounted in a non-persistent fashion to prevent failures
- Inhibit the upgrade when /var/lib/leapp mounted with the noexec option to prevent failures
- Make the application of custom selinux rules more reliable and do not override changes done by RPM scriptlets
- Mass refactoring to be compatible with leapp v0.15.0
- PESEventScanner actor has been fully refactored
- Skip comment lines when parsing the GRUB configuration file
- Resolves: rhbz#2090749, rhbz#1836179, rhbz#1885335, rhbz#1917314, rhbz#1937383, rhbz#2036069, rhbz#2071553, rhbz#2072550</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.17.0-2" date="1668168000">- Fix the upgrade on s390x with ZFCP
- Resolves: #2140563</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.17.0-8" date="1676376000">- Ensure that satellite metapackages are installed after the upgrade
- Satellite: reindex all related databases to fix issues due to new locales in RHEL 8
- Resolves: #2142270</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.17.0-10" date="1677499200">- Re-apply the fix for handling of upgrades on s390x with ZFCP to correctly
  convert the ZIPL configuration to BLS format
- Resolves: #2140563</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.18.0-1" date="1678190400">- Rebase to v0.18.0
- Set new upgrade paths RHEL 7.9 -&gt; 8.8, 8.6 (default: 8.8)
- Requires cpio
- Bump leapp-repository-dependencies to 9
- Add breadcrumbs results to RHSM facts unless --no-rhsm-facts is used
- Register subscribed systems automatically to Red Hat Insights unless --no-insights-register is used
- Add leapp RHUI packages to an allowlist to drop confusing reports
- Check RPM signatures during the upgrade
- Check only mounted XFS partitions
- Check the validity and compatitibility of used leapp data
- Detect a proxy configuration in YUM/DNF and adjust an error msg on issues caused by the configuration
- Detect and report systemd symlinks that are broken before the upgrade
- Detect corrupted grubenv file
- Disable the amazon-id DNF plugin on AWS during the upgrade stage to omit error messages during the upgrade process caused by missing network connection
- Do not create new *pyc files when running leapp after the DNF upgrade transaction
- Drop obsoleted upgrade paths
- Enable upgrades on s390x when /boot is part of rootfs
- Ensure that rsyncd stays enabled if it is enabled prior the upgrade
- Ensure the device_cio_free service stays enabled on s390x after the upgrade
- Extend the allow list of RHUI clients by azure-sap-apps to omit confusing report
- Filter out PES events unrelated for the used upgrade path and handle overlapping events
 (fixes upgrades with quagga installed)
- Fix scan of ceph volumes on systems without ceph-osd or when ceph-osd container is not found
- Fix systemd symlinks that become incorrect during the IPU
- Fix the check of memory (RAM) limits and use human readable values in the report
- Fixed checks for RHEL SAP IPU 7.9 -&gt; 8.6
- Fixed migration of ntp to chrony when the ntp service is masked
- Ignore external accounts in /etc/passwd
- Improve remediation instructions for packages in unknown repositories
- Improve the error message to guide users when discovered more space is needed
- Inhibit the upgrade when entries in /etc/fstab cause overshadowing during the upgrade
- Introduced an option to use an ISO file as a target RHEL version content source
- Introduced possibility to specify what systemd services should be enabled/disabled on the upgraded system
- Introduced the --nogpgcheck option to skip checking of RPM signatures
- Map the target repositories also based on the installed content
- Prevent re-run of leapp in the upgrade initramfs in case of previous failure
- Prevent the upgrade with RHSM when Baseos and Appstream target repositories are not discovered
- Prevent the traceback during migration of sendmail configuration files when the package is not installed
- Provide common information about systemd services
- RHUI(Azure) Handle correctly various SAP images
- Remove obsoleted GPG keys provided by RH after the upgrade to prevent errors
- Rework the network configuration handling and parse the configuration data properly
- Set the system release lock after the upgrade also for premium channels
- Small improvements and fixes in various reports
- Resolves: #2143374, #1901440, #1905519, #1972238, #1988449, #1988457, #2014009
- Resolves: #2031098, #2032953, #2055117, #2088491, #2089514, #2110045, #2122712
- Resolves: #2127918, #2158527, #2159288, #2162785, #2163796</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.18.0-2" date="1683806400">- Include leap data files in the package
- Change the upgrade paths for RHEL with SAP HANA:
      RHEL with SAP HANA 7.9 -&gt; 8.6, 8.8 (default: 8.6)
- Resolves: #2203253</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.18.0-3" date="1685966400">- Update the repomap.json file to address planned changes on RHUI Azure
- Resolves: #2203253</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.18.0-4" date="1687176000">- Introduce new upgrade path RHEL 7.9 -&gt; 8.9 (default)
- Update leapp data files to reflect new changes between systems
- Minor improvements of generated reports
- Fix false positive report about invalid symlinks
- Resolves: #2215998</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.18.0-5" date="1689681600">- Fix the calculation of the required free space on each partitions/volume for the upgrade transactions
- Create source overlay images with dynamic sizes to optimize disk space consumption
- Update GRUB2 when /boot resides on multiple devices aggregated in RAID
- Use new leapp CLI API which provides better report summary output
- Introduce possibility to add (custom) kernel drivers to initramfs
- Fix the generation of the report about hybrid images
- Minor improvements and fixes of various reports
- Requires leapp-framework 4.0
- Update leapp data files
- Fix false positive report about invalid symlinks on RHEL 7
- Resolves: #1832730, #1871076, #2134213, #2215998, #2219544</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.19.0-1" date="1692792000">- Rebase to v0.19.0
- Requires leapp-framework 5.0
- Handle correctly the installed certificates to allow upgrades with custom repositories using HTTPs with enabled SSL verification
- Fix failing upgrades with devtmpfs file systems specified in FSTAB
- Do not try to update GRUB core on IBM Z systems
- Minor improvements and fixes of various reports and error messages
- Redesign handling of information about kernel (booted and target)
- Use new leapp CLI API which provides better report summary output
- Resolves: rhbz#2215027, rhbz#2040706, rhbz#2215998</changelog>
</package>
<package pkgid="ee154ccf600dab7eb85edbf9b0a97fc9a416c5af1f7a9b73275e3b00ca9f2a28" name="leapp-repository" arch="src">
  <version epoch="0" ver="0.20.0" rel="2.el7_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.18.0-3" date="1685966400">- Update the repomap.json file to address planned changes on RHUI Azure
- Resolves: #2203253</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.18.0-4" date="1687176000">- Introduce new upgrade path RHEL 7.9 -&gt; 8.9 (default)
- Update leapp data files to reflect new changes between systems
- Minor improvements of generated reports
- Fix false positive report about invalid symlinks
- Resolves: #2215998</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.18.0-5" date="1689681600">- Fix the calculation of the required free space on each partitions/volume for the upgrade transactions
- Create source overlay images with dynamic sizes to optimize disk space consumption
- Update GRUB2 when /boot resides on multiple devices aggregated in RAID
- Use new leapp CLI API which provides better report summary output
- Introduce possibility to add (custom) kernel drivers to initramfs
- Fix the generation of the report about hybrid images
- Minor improvements and fixes of various reports
- Requires leapp-framework 4.0
- Update leapp data files
- Fix false positive report about invalid symlinks on RHEL 7
- Resolves: #1832730, #1871076, #2134213, #2215998, #2219544</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.19.0-1" date="1692792000">- Rebase to v0.19.0
- Requires leapp-framework 5.0
- Handle correctly the installed certificates to allow upgrades with custom repositories using HTTPs with enabled SSL verification
- Fix failing upgrades with devtmpfs file systems specified in FSTAB
- Do not try to update GRUB core on IBM Z systems
- Minor improvements and fixes of various reports and error messages
- Redesign handling of information about kernel (booted and target)
- Use new leapp CLI API which provides better report summary output
- Resolves: rhbz#2215027, rhbz#2040706, rhbz#2215998</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.19.0-2" date="1700136000">- Enable new upgrade path for RHEL 8.10 -&gt; RHEL 9.4 (including RHEL with SAP HANA)
- Introduce generic transition of systemd services states during the IPU
- Introduce possibility to upgrade with local repositories
- Improve possibilities of upgrade when a proxy is configured in DNF configutation file
- Fix handling of symlinks under /etc/pki when managing certificates
- Fix the upgrade with custom https repositories
- Default to the NO_RHSM mode when subscription-manager is not installed
- Detect customized configuration of dynamic linker
- Drop the invalid `tuv` target channel for the --channel option
- Fix the issue of going out of bounds in the isccfg parser
- Fix traceback when saving the rhsm facts results and the /etc/rhsm/facts directory doesn’t exist yet
- Load all rpm repository substitutions that dnf knows about, not just "releasever" only
- Simplify handling of upgrades on systems using RHUI, reducing the maintenance burden for cloud providers
- Detect possible unexpected RPM GPG keys has been installed during RPM transaction
- Resolves: RHEL-3272, RHEL-11958, RHEL-3284, RHEL-11347</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.19.0-3" date="1705060800">- Add detection of possible usage of OpenSSL IBMCA engine on IBM Z machines
- Add detection of modified /etc/pki/tls/openssl.cnf file
- Update the leapp upgrade data files
- Fix handling of symlinks under /etc/pki with relative paths specified
- Report custom actors and modifications of the upgrade tooling
- Requires xfsprogs and e2fsprogs to ensure that Ext4 and XFS tools are installed
- Fix the upgrade of the RH Satellite server when tomcat is installed
- Bump leapp-repository-dependencies to 10
- Resolves: RHEL-10847, RHEL-10703, RHEL-21449, RHEL-11193, RHEL-3284</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.19.0-4" date="1705665600">- Do not try to download data files anymore when missing as the service
  is obsoleted since the data is part of installed packages
- Update error messages and reports when installed upgrade data files
  are malformed or missing to instruct user how to resolve it
- Update the leapp upgrade data files - bump data stream to "3.0"
- Resolves: RHEL-18298</changelog>
  <changelog author="Toshio Kuratomi &lt;toshio@fedoraproject.org&gt; - 0.19.0-5" date="1706011200">- Print nice error msg when device and driver deprecation data is malformed
- Fix another cornercase when preserving symlinks to certificates in /etc/pki
- Resolves: RHEL-3284</changelog>
  <changelog author="Toshio Kuratomi &lt;toshio@fedoraproject.org&gt; - 0.20.0-1" date="1707825600">- Rebase to new upstream v0.20.0.
- Fix semanage import issue
- Fix handling of libvirt's systemd services
- Add a dracut breakpoint for the pre-upgrade step.
- Drop obsoleted upgrade paths (obsoleted releases: 8.6, 8.9)
- Resolves: RHEL-21449, RHEL-3295</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 0.20.0-2" date="1708430400">- Fallback to original RHUI solution on AWS to fix issues caused by changes in RHUI client
- Resolves: RHEL-21449</changelog>
</package>
<package pkgid="84e0964a98b532aa02f530b3795b6a13e0eebabb8da42cea9be3dedc78123aba" name="less" arch="src">
  <version epoch="0" ver="458" rel="10.el7_9"/>
  <changelog author="Fridolin Pokorny &lt;fpokorny@redhat.com&gt; - 458-1" date="1365681600">- Update to 458</changelog>
  <changelog author="Fridolin Pokorny &lt;fpokorny@redhat.com&gt; - 458-2" date="1365681601">- Added gpg support to lesspipe.sh (#885122)
- Added ~/.lessfilter support (#885122)</changelog>
  <changelog author="Fridolin Pokorny &lt;fpokorny@redhat.com&gt; - 458-3" date="1367928000">- Expanded lessecho usage (#948597)
- Added lessfilter info to man (#948597)
- Expanded lesskey usage (#948597)
- Added --old-bot to help (#948597)</changelog>
  <changelog author="Ondrej Vasik &lt;ovasik@redhat.com&gt; - 458-4" date="1373544000">- apply the --old-bot patch (#983167)</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 458-5" date="1385985600">- fixing regression in 72dfd3f63594e1d4c9416180a95c47ae583934c6
  incorrect parsing of commandline arguments
- Resolves #948597</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 458-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 458-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 458-8" date="1391428800">- changes introduced in less-458-old-bot-in-help.patch
  wasn't compiled in. It is necessary to use mkhelp tool.
  Resolves: #948597</changelog>
  <changelog author="Jozef Mlich &lt;jmlich@redhat.com&gt; - 458-9" date="1432209600">- The --use-backslash option documented in the man page
  was missing from online help for less.
  Resolves: #1109090</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 458-10" date="1713873600">- Fix CVE-2024-32487
- Resolves: RHEL-32802</changelog>
</package>
<package pkgid="3277d79f8fb65efa0b4bd7d0f15f3d48290aae42cea1c72338161da751e1b2b9" name="lftp" arch="src">
  <version epoch="0" ver="4.4.8" rel="14.el7_9"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-5" date="1431432000">- Fix option xfer:auto-rename not documented (#1035229)</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-6" date="1431518400">- Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
- Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
- Added RFE - lftp configurations for restricting each SSL/TLS 
  version (#1182987)
- Fixed bogus dates of this SPEC</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-7" date="1434369600">- Fixed issue with absolute URL locations in mirror mode
- Related: #1181580</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 4.4.8-8" date="1463054400">- Resolves: #1285301 - lftp hangs after dowloading one file during a mirror</changelog>
  <changelog author="Michal Ruprich - 4.4.8-9" date="1478520000">- Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp</changelog>
  <changelog author="Michal Ruprich - 4.4.8-10" date="1479124800">- Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                    - Patch edited so that it corresponds to upstream</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-11" date="1526040000">- Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
- Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-12" date="1563969600">- Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-13" date="1580817600">- Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.4.8-14" date="1664798400">- Resolves: #2115215 - Request "--env-password" option for lftp 4.4.8 for RHEL 7</changelog>
</package>
<package pkgid="d7cf6decce22e68904c895c8150d03739a05076f9e9578f1146f0e3729c796a3" name="libX11" arch="src">
  <version epoch="0" ver="1.6.7" rel="3.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.4-1" date="1475668800">- libX11 1.6.4</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
</package>
<package pkgid="41c3f6774b2df6c45d1676ac226002e0e6fee395131f3b5599ea57eb4c69c0fb" name="libX11" arch="src">
  <version epoch="0" ver="1.6.7" rel="4.el7_9"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-2" date="1483617600">- Plug a memory leak in XListFonts()</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-4" date="1629201600">- Fix CVE-2021-31535 (#1962438)</changelog>
</package>
<package pkgid="3714a0f6ac12704d064ef882ed460210f69268e52ced156c0f54d789117b4827" name="libX11" arch="src">
  <version epoch="0" ver="1.6.7" rel="5.el7_9"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-3" date="1483963200">- Fix a bug in the memory leak fix from 1.6.4-2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.4-4" date="1484913600">- Actually apply the patch from 1.6.4-3</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-1" date="1493208000">- libX11 1.6.5</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.6.5-2" date="1531396800">- Rebuild to pick up new xproto keysyms (#1600147)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.5-3" date="1551441600">- Make the server-disconnect message less alarming</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-1" date="1555329600">- libX11 1.6.7</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-2" date="1559044800">- Restore the less-alarming server-disconnect message</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.6.7-3" date="1603972800">- Fix CVE-2020-14363 (#1873922)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.6.7-4" date="1629201600">- Fix CVE-2021-31535 (#1962438)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.6.7-5" date="1706616000">- Backport fix for Xlib lockups due to recursive XError (RHEL-23053)</changelog>
</package>
<package pkgid="e282cc61a98eb40db302b2a53aa1b0e993dd65c9d69189755a5eeb301201a328" name="libXpm" arch="src">
  <version epoch="0" ver="3.5.12" rel="2.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.5.10-1" date="1331208000">- libXpm 3.5.10</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.10-4" date="1362657600">- autoreconf for aarch64</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.10-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 3.5.11-1" date="1392206400">- libXpm 3.5.11
- Drop pre-F18 changelog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.11-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.5.11-3" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Benjamin Tissoires &lt;benjamin.tissoires@redhat.com&gt; 3.5.12-1" date="1485172800">- libXpm 3.5.12</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 3.5.12-2" date="1674129600">- Fix CVE-2022-4883: compression commands depends on $PATH (#2161715)</changelog>
</package>
<package pkgid="05e5cb511e5ac5f2d383ad79227d7c202fe74fc51e19769d85ae79f785d8637d" name="libexif" arch="src">
  <version epoch="0" ver="0.6.22" rel="2.el7_9"/>
  <changelog author="Petr Sabata &lt;psabata@redhat.com&gt; - 0.6.20-1" date="1300449600">- 0.6.20 bump
- Repackaging prehistoric libexif-docs, introducing version string in filename
- Buildroot cleanup</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.20-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-1" date="1342180800">- 0.6.21 bump
- A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
  CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 &amp; CVE-2012-2845)
- Drop the pre-generated docs and introduce a doc subpackage</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.6.21-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.6.21-4" date="1364385600">- Run autoreconf for aarch64</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.6.21-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.22-1" date="1591272000">- Upgrade to 0.6.22
- Resolves: #1841316</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 0.6.22-2" date="1607342400">- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452
- Resolves: #1902589</changelog>
</package>
<package pkgid="fdbfc76aad89dfc7c9a0e5878b5aaf7552a0862e4857dc39dab1555f539a4d23" name="libgweather" arch="src">
  <version epoch="0" ver="3.28.2" rel="4.el7_9"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.1-2" date="1467374400">- Update translations
  Resolves: #1304249</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.14.1-3" date="1472644800">- Switch to new METAR data provider
- Resolves: #1371550</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.4-1" date="1482840000">- Update to 3.20.4
- Resolves: #1387009</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.0-1" date="1508760000">- Update to 3.26.0
- Related: #1481381</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.1-1" date="1521720000">- Update to 3.28.1
- Resolves: #1569295</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.28.1-2" date="1529064000">- Backport a patch to fix a gnome-shell crash
- Related: #1569295</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.28.2-1" date="1533124800">- Update to 3.28.2
- Resolves: #1569295</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.28.2-2" date="1533816000">- Fix dangling symbolic link to README.md
- Resolves: #1569295</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.28.2-3" date="1564401600">- Fix multilib conflict in subpackage (#1623538)</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 3.28.2-4" date="1616500800">- Fix no weather data available
- Resolves: #1938275</changelog>
</package>
<package pkgid="3ef21aa3bfb6b908289d36a31fe6015a941d5ece30197c8c2e9a28bcbdf1b51c" name="libksba" arch="src">
  <version epoch="0" ver="1.3.0" rel="6.el7_9"/>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 1.0.8-3" date="1307016000">- libksba-devel multilib conflict (#601976)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.2.0-1" date="1313496000">- new upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-3" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-1" date="1353499200">- new upstream version</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-2" date="1354536000">- fix multilib conflict in libksba-config</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-6" date="1666180800">- Fix for CVE-2022-3515 (#2135695)</changelog>
</package>
<package pkgid="ec61e741006f64e85cc254f910a32a02252fdf1c886ceb3f328cd49c960d1d7f" name="libksba" arch="src">
  <version epoch="0" ver="1.3.0" rel="7.el7_9"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.2.0-1" date="1313496000">- new upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.0-3" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-1" date="1353499200">- new upstream version</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 1.3.0-2" date="1354536000">- fix multilib conflict in libksba-config</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.0-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-6" date="1666180800">- Fix for CVE-2022-3515 (#2135695)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.3.0-7" date="1674648000">- Fix for CVE-2022-47629 (#2161571)</changelog>
</package>
<package pkgid="24bf73bc18c58c5bfea3ad216b57c631446cbe5bcd5ab8e835529429fb017b55" name="libldb" arch="src">
  <version epoch="0" ver="1.5.4" rel="2.el7_9"/>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.25-1" date="1459512000">- Rebase libldb to 1.1.25
- Remove upstreamed patches
- Related: rhbz#1322691</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.26-1" date="1465473600">- Resolves: rhbz#1320253 - Rebase libldb to version 1.1.26</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.29-1" date="1487073600">- Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                           version 4.6.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.2.2-1" date="1508068800">- Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                           version 4.7.x</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.2-1" date="1523361600">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.3-1" date="1525348800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.3.4-1" date="1530100800">- Resolves: rhbz#1558497 - Rebase libldb to enable samba rebase</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.4.2-1" date="1547640000">- Resolves: rhbz#1658758 - Rebase libldb to version 1.4.2 for Samba</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.5.4-1" date="1564660800">- Resolves: rhbz#1736013 - Rebase libldb to version 1.5.4 for Samba</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.5.4-2" date="1616500800">- resolves: #1941511 - Fix CVE-2021-20277</changelog>
</package>
<package pkgid="110d9aeccb0644bc1e69fbd98711da8d4c79d6d55130dd5a4b7cdfd99692be9f" name="libpcap" arch="src">
  <version epoch="14" ver="1.5.3" rel="13.el7_9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-4" date="1417521600">- disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-5" date="1427803200">- display also first packet when capturing in cooked mode (#1176612)
- make sure that userland bpf filter interpreter is given snaplen such that size of
  cooked header is account for</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-6" date="1434456000">- libpcap now correctly recognizes Netlink datalink type (#1031974)
- fix vlan tagged packet filtering (#1079525)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-7" date="1436356800">- make sure that netlink monitor interfaces are also properly recognized by tcpdump (#1031974)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 14:1.5.3-8" date="1442318400">- make sure that sll header size is accounted for (#1176612)</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:1.5.3-9" date="1496059200">- Bound packet size to 64k</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 14:1.5.3-10" date="1502798400">- Add support for AF_VSOCK</changelog>
  <changelog author="Michal Ruprich - 14:1.5.3-11" date="1508241600">- Resolves: #1427251 - tcpdump incorrectly shows 0x8100 tag for 802.1ad frames</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.5.3-12" date="1563969600">- Resolves: #1596834 - Re-enable TPACKET_V3 to fix silent packet drops</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 14:1.5.3-13" date="1646222400">- Resolves: #2027937 - libpcap 1.5.3 with distro patch applied writes pcap file with broken pkthdr</changelog>
</package>
<package pkgid="ae64f4387b4b2e99838a72ae725ce1878b220fbad68b7448daefabc95e975b98" name="libreoffice" arch="src">
  <version epoch="1" ver="5.3.6.1" rel="25.el7_9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-16" date="1528718400">- Resolves: rhbz#1589029 impress not showing text-highlight in presentation mode</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
</package>
<package pkgid="3d31c2aaebf83ae52668905b9d7bc29f6bd43fcc7671ff2ec20b3908800b6788" name="libreoffice" arch="src">
  <version epoch="1" ver="5.3.6.1" rel="26.el7_9"/>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-17" date="1533124800">- Resolves: rhbz#1545262 Workaround for spurious ppc64le automated testing crash
- Resolves: rhbz#1610692 silence console warnings from print dialog</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-18" date="1533297600">- Resolves: rhbz#1610904 draw glitches in drag cursor</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-19" date="1533902400">- Resolves: rhbz#1614419 detect PK11_ImportSymKey failure under FIPS</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-20" date="1549281600">- Resolves: rhbz#1672003 CVE-2018-16858</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-21" date="1550750400">- Resolves: rhbz#1066844 drop libreofficekit requires</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-22" date="1567771200">- Resolves: rhbz#1743962 CVE-2019-9848
- Resolves: rhbz#1743954 CVE-2019-9849</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-23" date="1568030400">- Resolves: rhbz#1601372 libreoffice fails to build with --nocheck</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:5.3.6.1-24" date="1572350400">- Resolves: rhbz#1728763 bg of blocks is black</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:5.3.6.1-25" date="1606824000">- Resolves: rhbz#1900004 Support Red Hat, Inc. as Java vendor</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:5.3.6.1-26" date="1715947200">- Fix CVE-2022-38745 Empty entry in Java class path
- Fix CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- Fix CVE-2023-1183 libreoffice: Arbitrary File Write
- Fix CVE-2023-6185 escape url passed to gstreamer</changelog>
</package>
<package pkgid="4803f7b552945bddff0d4f16701655e24e41acb3accb89cc99cf1db0b81c2a97" name="librepo" arch="src">
  <version epoch="0" ver="1.8.1" rel="8.el7_9"/>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.11-2" date="1419249600">- Make tests port agnostic</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.12-1" date="1421409600">- downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
- downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
- downloader: Show also calculated checksums in error message about bad checksum
- Python: Return all strings in unicode</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.13-1" date="1422014400">- Fix ABI compatibility (RhBug: 1185180)
- fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
- downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
- Make building tests and docs optional
- librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-1" date="1424865600">- tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
- Add LRO_OFFLINE
- Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
- Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
- Add LR_VERSION constant with version string
- python: Import contants from C librepo module in a loop
- repoconf: Add support for failover and skip_if_unavailable options
- handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
- Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
- util: Add lr_is_local_path()
- New module repoconf for reading *.repo files
- Add LRO_HTTPHEADER option (RhBug: 1181123)</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.14-2" date="1424865601">- compat: fix ck_assert_msg() segfault in rhel-7</changelog>
  <changelog author="Tomas Mlcoch &lt;tmlcoch at redhat.com&gt; - 1.7.15-1" date="1429012800">- Do not inlude header in the body output (RhBug: 1207685)
- metalink: Proper error handling
- New LRR_RPMMD_* contants
- Support for client certificates
- Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
- CMakeLists.txt: do not check for CXX
- build: Use solely pkg-config to find glib</changelog>
  <changelog author="Colin Walters &lt;walters@redhat.com&gt; - 1.7.15-2" date="1431432000">- Disable tests and drop python-flask build dependency on RHEL7, as
  it is not in the core</changelog>
  <changelog author="Colin Walters &lt;tmlcoch@redhat.com&gt; - 1.7.16-1" date="1432900800">- Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
- downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
- test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
- repoconf: Proper handling of gint64 and guint64 types
- build: Be compatible with cmake 2.8
- handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
- utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
- Python: call lr_global_init() during module initialization
- Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
- util: Honor RFC 3986 (Issue #55)</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 1.8.1-1" date="1528459200">- Add yumrecord substitution mechanism (mluscon)
- Fix a memory leak in signature verification (cwalters)
- Add new option LRO_FTPUSEEPSV
- downloader prepare_next_transfer(): simplify long line
- downloader prepare_next_transfer(): add missing error check
- downloader prepare_next_transfer(): cleanup error path
- downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
- handle: Don't use proxy cache for downloads of metalink/mirrorlist
- handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
- downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
- Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
- New test: always try to download from the fastest mirror (Alexander Todorov)</changelog>
  <changelog author="Ales Matej &lt;amatej@redhat.com&gt; - 1.8.1-8" date="1597320000">- Validate paths read from repomd.xml (RhBug: 1866500)</changelog>
</package>
<package pkgid="5196e61c13d0660bc416d91ea1fbd83c48f2b951780c50b2d527cee023424d25" name="libsndfile" arch="src">
  <version epoch="0" ver="1.0.25" rel="12.el7_9.1"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-4" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.25-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-6" date="1364385600">- fix support for aarch64 (#925887)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-7" date="1370260800">- fix support for aarch64, another part (#969831)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.0.25-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.0.25-10" date="1406980800">- Generic 32/64 bit platform detection - fix ppc64le build (#1126140)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-11" date="1572350400">- fix CVE-2018-13139 - stack-based buffer overflow in sndfile-deinterleave utility (#1598577)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12" date="1583928000">- fix CVE-2018-19662 - buffer over-read in the function i2alaw_array (#1673086)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.0.25-12.1" date="1627473600">- a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)</changelog>
</package>
<package pkgid="21fa118f71ddd01298f6afe3152c9687b3a11ff7a934df989a1c7f130f2b2be4" name="libssh2" arch="src">
  <version epoch="0" ver="1.8.0" rel="4.el7_9.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-9" date="1430827200">- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-10" date="1433160000">- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-11" date="1455883200">- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.4.3-12" date="1506427200">- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-1" date="1542801600">- rebase to 1.8.0 (#1592784)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-2" date="1552996800">- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
- fix out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
- fix zero-byte allocation in SFTP packet processing resulting in out-of-bounds read (CVE-2019-3858)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.8.0-3" date="1553083200">- sanitize public header file (detected by rpmdiff)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 1.8.0-4" date="1572436800">- fix integer overflow in SSH_MSG_DISCONNECT logic (CVE-2019-17498)</changelog>
  <changelog author="Tripp Waldrop &lt;trwaldro@redhat.com&gt; - 1.8.0-4.el7_9.1" date="1695211200">- fix use-of-uninitialized-value (CVE-2020-22218)</changelog>
</package>
<package pkgid="2f73c3f104b53952f37ddced99444ec9be7f0ae9ef9b0ce405b1f258df9ff017" name="libstoragemgmt" arch="src">
  <version epoch="0" ver="1.8.1" rel="2.el7_9"/>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-1" date="1526385600">- Upgrade to 1.6.2</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-2" date="1530014400">- Silence socket EPIPE error. (RHBZ #1582458)</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; 1.6.2-3" date="1531396800">- Fix rpm runtime dependency of libstoragemgmt-local-plugin.</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.6.2-4" date="1535716800">- Fix FHS problem of find_unused_lun.py and etc, (RHBZ #1623515)</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.2-1" date="1545220800">- Upgrade to 1.7.2</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-1" date="1550232000">- Add nfs-utils as a dependency
- Upgrade to 1.7.3</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-2" date="1550318400">* https://bugzilla.redhat.com/show_bug.cgi?id=1629735</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.7.3-3" date="1553774400">* https://bugzilla.redhat.com/show_bug.cgi?id=1693678</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-1" date="1565697600">- Upgrade to 1.8.1
- Obsolete the netapp plugin.</changelog>
  <changelog author="Tony Asleson &lt;tasleson@redhat.com&gt; - 1.8.1-2" date="1612440000">- https://bugzilla.redhat.com/show_bug.cgi?id=1872745
- https://bugzilla.redhat.com/show_bug.cgi?id=1903665</changelog>
</package>
<package pkgid="36f0c9c317224ca648df6eb49ceb1ae7b9b5bfe04af7e4b4f76c9ad180dc5343" name="libtimezonemap" arch="src">
  <version epoch="0" ver="0.4.4" rel="2.el7_9"/>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.1-3" date="1385553600">- Added a glade catalog file (dshea)</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.1-4" date="1385985600">- Merge fixes from lp:timezonemap
- Add cc-timezone-location.h to timezonemapincludes_HEADERS so it gets installed (iain.lane)
- Set en_name correctly (iain.lane)
- Don't call g_type_init() on glib &gt;= 2.35; it's deprecated (iain.lane)</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-1" date="1399032000">- New upstream release libtimezonemap-0.4.2</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.2-2" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 0.4.2-3" date="1406030400">- Rebuilt for gobject-introspection 1.41.4</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.4.2-4" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-5" date="1422446400">- Use GPLv3 for the license file</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.2-6" date="1430481600">- Updated the time zone map images
- Updated the city data from geonames.org
- Fix a memory leak and potential crash with the locations list
- Cycle through a smaller list of map locations on repeated clicks</changelog>
  <changelog author="David Shea &lt;dshea@redhat.com&gt; - 0.4.4-1" date="1431086400">- Fixes for LP#1440157:
  Port to libsoup directly for geoname results
  Fix some memory leaks
  Do not reuse GCancellables
- Upstream merges of SVG update and constrained location cycles</changelog>
  <changelog author="Jiri Konecny &lt;jkonecny@redhat.com&gt; - 0.4.4-2" date="1655812800">- Remove regions from the map
  Resolves: rhbz#2098126</changelog>
</package>
<package pkgid="57c746c76f1c0d0aa62f99a8d646daf8c75ce43f731c0cc463b9309928911045" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="36.el7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-27" date="1570708800">- conf: utility function to update entry in def-&gt;nets array (rhbz#1558934)
- spec: Fix permissions of /var/run/libvirt/qemu (rhbz#1738693)
- RHEL: virscsi: Check device type before getting it's /dev node name (rhbz#1754241)
- RHEL: virscsi: Support TAPEs in virSCSIDeviceGetDevName() (rhbz#1754241)
- RHEL: virscsi: Introduce and use virSCSIDeviceGetUnprivSGIOSysfsPath() (rhbz#1754241)
- RHEL: virutil: Accept non-block devices in virGetDeviceID() (rhbz#1754241)
- virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1759904)
- test: Introduce virnetdevopenvswitchtest (rhbz#1759904)
- vircommand: Separate mass FD closing into a function (rhbz#1759904)
- virCommand: use procfs to learn opened FDs (rhbz#1759904)
- util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1759904)
- util: Avoid possible error in virCommandMassClose (rhbz#1759904)
- RHEL: qemuSetUnprivSGIO: Actually use calculated @sysfs_path to set unpriv_sgio (rhbz#1754241)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-28" date="1571918400">- domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (rhbz#1741782)
- domain_conf: Relax SCSI addr used check (rhbz#1741782)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-29" date="1574942400">- qemu: Forcibly mknod() even if it exists (rhbz#1752978)
- qemu_process: fix starting VMs if machine group has limited cpuset.cpus (rhbz#1746517)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
</package>
<package pkgid="7ccaf0f69054906cefa71d5d9c10fb715a55871b82e779698857132967817bf4" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.3"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-30" date="1575460800">- nwfilter: Remove redundant check if object exists (rhbz#1766475)
- RHEL: qemu: Enable virt-ssbd for host-model with old QEMU (rhbz#1745181)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-31" date="1575547200">- process: wait longer on kill per assigned Hostdev (rhbz#1771204)
- process: wait longer 5-&gt;30s on hard shutdown (rhbz#1771204)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
</package>
<package pkgid="c7da45ec7679f9cda0ee309636eb09e6f7b5ba11c79f9134d3a63073ead8014b" name="libvirt" arch="src">
  <version epoch="0" ver="4.5.0" rel="36.el7_9.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-32" date="1580385600">- qemu: Don't emit SUSPENDED_POSTCOPY event on destination (rhbz#1791886)
- node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (rhbz#1792831)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-33" date="1581681600">- RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1801139)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-34" date="1587729600">- vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (rhbz#1815269)
- vmx: make 'fileName' optional for CD-ROMs (rhbz#1815269)
- RHEL: Fix migration on AMD hosts with old QEMU (rhbz#1815572)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-35" date="1588852800">- qemu: don't take agent and monitor job for shutdown (CVE-2019-20485)
- qemu: don't hold a monitor and agent job for reboot (CVE-2019-20485)
- qemu: don't hold monitor and agent job when setting time (CVE-2019-20485)
- qemu: remove use of qemuDomainObjBeginJobWithAgent() (CVE-2019-20485)
- qemu: remove qemuDomainObjBegin/EndJobWithAgent() (CVE-2019-20485)
- storage: Fix daemon crash on lookup storagepool by targetpath (CVE-2020-10703)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36" date="1589371200">- virDevMapperGetTargetsImpl: Be tolerant to kernels without DM support (rhbz#1823976)
- virDevMapperGetTargetsImpl: quit early if device is not a devmapper target (rhbz#1823976)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.1" date="1594900800">- qemu: end the agent job in qemuDomainSetTimeAgent (rhbz#1844952)
- util: string: Introduce macro for automatic string lists (rhbz#1839992)
- util: Rework virStringListAdd (rhbz#1839992)
- qemu: Create multipath targets for PRs (rhbz#1839992)
- util: Move virIsDevMapperDevice() to virdevmapper.c (rhbz#1839992)
- virDevMapperGetTargetsImpl: Check for dm major properly (rhbz#1839992)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.2" date="1595419200">- Rebuild to correct invalid dist tag</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.3" date="1603195200">- rpc: gendispatch: handle empty flags (CVE-2020-25637)
- rpc: add support for filtering @acls by uint params (CVE-2020-25637)
- rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637)
- qemu: agent: set ifname to NULL after freeing (CVE-2020-25637)
- conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1868549)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.4" date="1616068800">- virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1933557)
- virdevmapper: Don't use libdevmapper to obtain dependencies (rhbz#1933557)
- virdevmapper: Don't cache device-mapper major (rhbz#1933557)
- virdevmapper: Handle kernel without device-mapper support (rhbz#1933557)
- virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1933557)
- virdevmapper: fix stat comparison in virDMSanitizepath (rhbz#1933557)
- virDevMapperGetTargetsImpl: Use correct length when copying into dm.name (rhbz#1933557)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 4.5.0-36.el7_9.5" date="1616155200">- RHEL: virdevmapper: Don't leak DIR on OOM in virDMSanitizepath() (rhbz#1933557)</changelog>
</package>
<package pkgid="7fc292f67faba3f2d43004c52ec432f7e4ef0f16f040d7580996ebf9e76e2984" name="libwebp" arch="src">
  <version epoch="0" ver="0.3.0" rel="10.el7_9"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.2.1-2" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
</package>
<package pkgid="a441ae7a3a629af76effdbbcbe5fde4410702c6049d616a1172e7dc4bf183cfc" name="libwebp" arch="src">
  <version epoch="0" ver="0.3.0" rel="11.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.1-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rahul Sundaram &lt;sundaram@fedoraproject.org&gt; - 0.3.0-1" date="1368446400">- upstream release 0.3.0
- enable gif2webp
- add build requires on giflib-devel and libtiff-devel
- use make_install and hardened macros
- list binaries explicitly</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 0.3.0-4" date="1408363200">- Fix ppc64le build</changelog>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0.3.0-5" date="1413201600">- Removing __PPC__ macro conflicting with __BYTE_ORDER__ endian check (#1127230)
- Resolves: rhbz#1127230</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-6" date="1487678400">- Rebuilt</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-7" date="1487678401">- Added libwebp dependency to libwebp-tools</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-10" date="1621252800">- Added fixes for rhbz#1956829, rhbz#1956843, rhbz#1956919</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 0.3.0-11" date="1682510400">- Added fix for mzbz#1819244</changelog>
</package>
<package pkgid="1d3f4e998d801d038a9a24d84758b19521cab7bca08ac1ddc49c6e7430a6e5b1" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.1" rel="6.el7_9.6"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-4" date="1389787200">- rebuild to activate -O3 on ppc64 rhbz#1051068</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.9.1-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-5.1" date="1413028800">- CVE-2014-3660 denial of service via recursive entity expansion (rhbz#1149087)</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6" date="1427112000">- Fix missing entities after CVE-2014-3660 fix
- CVE-2014-0191 Do not fetch external parameter entities (rhbz#1195650)
- Fix regressions introduced by CVE-2014-0191 patch</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - 2.9.1-6.2" date="1448884800">- Fix a series of CVEs (rhbz#1286496)
- CVE-2015-7941 Stop parsing on entities boundaries errors
- CVE-2015-7941 Cleanup conditional section error handling
- CVE-2015-8317 Fail parsing early on if encoding conversion failed
- CVE-2015-7942 Another variation of overflow in Conditional sections
- CVE-2015-7942 Fix an error in previous Conditional section patch
- Fix parsing short unclosed comment uninitialized access
- CVE-2015-7498 Avoid processing entities after encoding conversion failures
- CVE-2015-7497 Avoid an heap buffer overflow in xmlDictComputeFastQKey
- CVE-2015-5312 Another entity expansion issue
- CVE-2015-7499 Add xmlHaltParser() to stop the parser
- CVE-2015-7499 Detect incoherency on GROW
- CVE-2015-7500 Fix memory access error due to incorrect entities boundaries
- CVE-2015-8242 Buffer overead with HTML parser in push mode
- CVE-2015-1819 Enforce the reader to run in constant memory</changelog>
  <changelog author="Daniel Veillard &lt;veillard@redhat.com&gt; - libxml2-2.9.1-6.3" date="1465214400">- Heap-based buffer overread in xmlNextChar (CVE-2016-1762)
- Bug 763071: Heap-buffer-overflow in xmlStrncat &lt;https://bugzilla.gnome.org/show_bug.cgi?id=763071&gt; (CVE-2016-1834)
- Bug 757711: Heap-buffer-overflow in xmlFAParsePosCharGroup &lt;https://bugzilla.gnome.org/show_bug.cgi?id=757711&gt; (CVE-2016-1840)
- Bug 758588: Heap-based buffer overread in xmlParserPrintFileContextInternal &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758588&gt; (CVE-2016-1838)
- Bug 758605: Heap-based buffer overread in xmlDictAddString &lt;https://bugzilla.gnome.org/show_bug.cgi?id=758605&gt; (CVE-2016-1839)
- Bug 759398: Heap use-after-free in xmlDictComputeFastKey &lt;https://bugzilla.gnome.org/show_bug.cgi?id=759398&gt; (CVE-2016-1836)
- Fix inappropriate fetch of entities content (CVE-2016-4449)
- Heap use-after-free in htmlParsePubidLiteral and htmlParseSystemiteral (CVE-2016-1837)
- Heap use-after-free in xmlSAX2AttributeNs (CVE-2016-1835)
- Heap-based buffer-underreads due to xmlParseName (CVE-2016-4447)
- Heap-based buffer overread in htmlCurrentChar (CVE-2016-1833)
- Add missing increments of recursion depth counter to XML parser. (CVE-2016-3705)
- Avoid building recursive entities (CVE-2016-3627)
- Fix some format string warnings with possible format string vulnerability (CVE-2016-4448)
- More format string warnings with possible format string vulnerability (CVE-2016-4448)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.4" date="1572609600">- Fix CVE-2015-8035 (#1595697)
- Fix CVE-2018-14404 (#1602817)
- Fix CVE-2017-15412 (#1729857)
- Fix CVE-2016-5131 (#1714050)
- Fix CVE-2017-18258 (#1579211)
- Fix CVE-2018-1456 (#1622715)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.5" date="1587556800">- Fix CVE-2019-19956 (#1793000)
- Fix CVE-2019-20388 (#1810057)
- Fix CVE-2020-7595 (#1810073)
- Fix xsd:any schema validation (#1812145)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.1-6.6" date="1632744000">- Fix CVE-2016-4658 (#1966916)</changelog>
</package>
<package pkgid="6a80d1c7a6343f124bf45201bae531b4fff251ca69341fe514fdef915b8cf6f1" name="linux-firmware" arch="src">
  <version epoch="0" ver="20200421" rel="80.git78c0348.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190318-71.git283373f" date="1552910400">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.3.0 (rhbz 1642422)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
</package>
<package pkgid="68df9c464e04ca87edac5461697841182b23fbbe8fde33cccaba476aeadc5236" name="linux-firmware" arch="src">
  <version epoch="0" ver="20200421" rel="81.git78c0348.el7_9"/>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; - 20190429-72.gitddde598" date="1556539200">- Update to latest upstream linux-firmware image for assorted updates
- cxgb4: update firmware to revision 1.23.4.0 (rhbz 1690727)
- linux-firmware: Add firmware file for Intel Bluetooth 22161 (rhbz 1622438)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
</package>
<package pkgid="82064fe5e673c33d4d1e9ad25b1750c2d94fcf0cc4c2260ba5e2fd5121e1927f" name="linux-firmware" arch="src">
  <version epoch="0" ver="20200421" rel="82.git78c0348.el7_9"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190815-73.git07b925b" date="1565956800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1741356)
- iwlwifi- Update to support the Cyclone Peak Dual Band 2x2 802.11ax
- iwl7265-firmware sub-package merged into iwl7260-firmware sub-package</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-80.git78c0348" date="1706097600">- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)</changelog>
</package>
<package pkgid="c22ef21703810b4d4bfc45d7c7db815416907b98c7f39543debb1e3790823df3" name="linux-firmware" arch="src">
  <version epoch="0" ver="20200421" rel="83.git78c0348.el7_9"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20190918-74.git6c6918a" date="1568808000">- Update to latest upstream linux-firmware image for assorted updates
- Update bnx2x firmware to latest upstream (rhbz 1720386)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-75.gite8a0f4c" date="1575374400">- Update to latest upstream linux-firmware image for assorted updates
- Update qed zipped/unzipped firmware to latest upstream (rhbz 1720385)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20191203-76.gite8a0f4c" date="1576584000">- Fix missing firmware symlinks (rhbz 1783196)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-77.git8eb0b28" date="1584964800">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1813818)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200323-78.git8eb0b28" date="1586260800">- Set higher compression (rhbz 1817410)</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; - 20200421-79.git78c0348" date="1588680000">- Update to latest upstream linux-firmware image for assorted updates (rhbz 1828390)</changelog>
  <changelog author="Augusto Caringi &lt;acaringi@redhat.com&gt; - 20200421-80.git78c0348" date="1607774400">- Update Intel Bluetooth firmwares (rhbz 1895787)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-81.git78c0348" date="1698321600">- Cross-Process Information Leak (RHEL-8938)
- Return Address Predictor velunerability leading to information disclosure (RHEL-9250)</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; - 20200421-82.git78c0348" date="1706097600">- AMD: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13985)</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20200421-83.git78c0348" date="1717070400">- hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Resolves: RHEL-4010, RHEL-4013, RHEL-4016, RHEL-4018, RHEL-4021</changelog>
</package>
<package pkgid="5664ae8337afe62b5cda77e8d78c7fb9ed286ac455426ef41908db0ed1264e97" name="linuxptp" arch="src">
  <version epoch="0" ver="2.0" rel="2.el7_9.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.4-3.20140718gitbdb6a3" date="1416916800">- fix resetting of linreg servo (#1165045)
- fix phc2sys automatic mode with multiple interfaces (#1108795)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-1" date="1486468800">- update to 1.8 (#1359311 #1353336)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-2" date="1489492800">- force BMC election when link goes down</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-3" date="1489579200">- fix backport of linkdown patch</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 1.8-4" date="1504785600">- Resolves: #1487522 - Race condition in phc2sys</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-5" date="1508846400">- add support for active-backup bonding (#1002657)
- add support for IP over InfiniBand (#1472880)
- fix handling of unknown/invalid management TLVs in pmc (#1459446 #1459449)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 1.8-6" date="1527681600">- add support for bonding to timemaster (#1549015)
- improve timemaster to restart terminated processes (#1527170)
- start ptp4l, timemaster and phc2sys after network-online target (#1541991)
- don't forward management requests to UDS port (#1520366)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-1" date="1553169600">- update to 2.0 (#1623919)
- add support for more accurate synchronization to phc2sys (#1643977)
- add support for active-backup team interface (#1650672)
- limit unicast message rate per address and grant duration</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-2" date="1553601600">- fix comparing of unicast addresses
- don't leak memory when allocation fails</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 2.0-2.el7_9.1" date="1624536000">- validate length of forwarded messages (CVE-2021-3570)</changelog>
</package>
<package pkgid="b531fbd5f5c159eb273d4347dbc8713688c1310e2a813bc453c6274bd1b5e37f" name="lldpad" arch="src">
  <version epoch="0" ver="1.0.1" rel="7.git036e314.el7_9"/>
  <changelog author="Petr &#x160;abata &lt;contyk@redhat.com&gt; - 0.9.46-8" date="1395230400">- Ignore supplied PG configuration if PG is being disabled (#1067261)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.9.46-9" date="1403870400">- Fix IEEE mode DCBX (#1102886)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.9.46-10" date="1413892800">- Sync with upstream v0.9.46-123-g48a5f38 (#1087096)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-1.git986eb2e" date="1434628800">- rebased to upstream v1.0.1-23-g986eb2e (#1175802)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-2.git986eb2e" date="1439380800">- convert from sysv shm to posix, to allow selinux restorecon (#1080287)</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 1.0.1-3.git036e314" date="1467806400">- 1273663 sync with upstream v1.0.1-26-g036e314
  system capability incorrect advertised as station only</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-4.git036e314" date="1533729600">- fix the OID printing routine (#1551623)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-5.git036e314" date="1551182400">- Fix memory leak on TLV reception (#1196320)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-6.git036e314" date="1567771200">- Fix lldpad dereference NULL (#1513337)
- Fix ecp22_start() failure to create object (#1510945)</changelog>
  <changelog author="Aaron Conole &lt;aconole@redhat.com&gt; - 1.0.1-7.git036e314" date="1657022400">- Fix compiler guard</changelog>
</package>
<package pkgid="d545e012abab6a615890f02b78fdf0a4952c2ba7a3071aa243c71cc71a5a05b2" name="lm_sensors" arch="src">
  <version epoch="0" ver="3.4.0" rel="8.20160601gitf9185e5.el7_9.1"/>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 3.3.4-11" date="1412164800">- Hardening the build (#1092536)
- Resolves: rhbz#1092536</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 3.4.0-0.20160601gitf9185e5.1" date="1464782400">- New upstream release
- Drop patches that are already present in upstream
- Apply upstream fix for systemd paths
- Resolves: #1297795</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 3.4.0-2.20160601gitf9185e5" date="1465992000">- Add explicit package version requirement.</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 3.4.0-3.20160601gitf9185e5" date="1471867200">- Replace Revision string with release and date. Resolves: #1362658</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 3.4.0-4.20160601gitf9185e5" date="1471953600">- Print warning message when running on an alternative architecture. 
- Resolves: #1362664</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-5.20160601gitf9185e5" date="1524225600">- Detect AMD Family 17h thermal sensors
- Resolves: rhbz#1569542</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-6.20160601gitf9185e5" date="1524484800">- Fix License field capitalization
- Resolves: rhbz#1577175
- Add detection of AMD Ryzen w/ Vega graphics
- Resolves: rhbz#1569542
- Fix issues found by Coverity Scan
- Resolves: rhbz#1578007</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-7.20160601gitf9185e5" date="1547553600">- Detect AMD Rome - Family 17h model 30h
- Resolves: rhbz#1650199</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.4.0-8.20160601gitf9185e5" date="1553688000">- Fixed stale links and outdated info
- Resolves: rhbz#1356253</changelog>
  <changelog author="Bryan Mason &lt;bmason@redhat.com&gt; - 3.4.0-8.20160601gitf9185e5.el7_9.1" date="1702209600">- New flag for no sensors added. This flag is used in VM environment
  to make sensors binaries not fail if no sensors was detected.
- Resolves: RHEL-17699</changelog>
</package>
<package pkgid="a32a6b5a5a163e1ba3e2ba031f2e71aeaa2647d0509aab9fa50d5747ca385995" name="log4j" arch="src">
  <version epoch="0" ver="1.2.17" rel="17.el7_4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:1.2.17-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-9" date="1365422400">- Reindex sources in more sensible way
- Add manual pages; resolves: rhbz#949413</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-10" date="1365681600">- Fix manpage names, thanks to Michal Srb for reporting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-11" date="1367236800">- Remove unneeded BR: maven-idea-plugin</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:1.2.17-12" date="1368532800">- Add DTD public id to XML and SGML catalogs.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.2.17-13" date="1373544000">- Enable tests
- Fix BR</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-14" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.2.17-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-16" date="1499774400">- Fix socket receiver deserialization vulnerability
- Resolves: CVE-2017-5645</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-17" date="1639569600">- Fix remote code execution vulnerability
- Resolves: CVE-2021-4104</changelog>
</package>
<package pkgid="0abe1cb9e0ace781872d86be2505e594d0545c82d2b153b7923f7badf5694904" name="log4j" arch="src">
  <version epoch="0" ver="1.2.17" rel="18.el7_4"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-9" date="1365422400">- Reindex sources in more sensible way
- Add manual pages; resolves: rhbz#949413</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-10" date="1365681600">- Fix manpage names, thanks to Michal Srb for reporting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-11" date="1367236800">- Remove unneeded BR: maven-idea-plugin</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 0:1.2.17-12" date="1368532800">- Add DTD public id to XML and SGML catalogs.</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0:1.2.17-13" date="1373544000">- Enable tests
- Fix BR</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-14" date="1382616000">- Remove desktop files</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 01.2.17-15" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-16" date="1499774400">- Fix socket receiver deserialization vulnerability
- Resolves: CVE-2017-5645</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-17" date="1639569600">- Fix remote code execution vulnerability
- Resolves: CVE-2021-4104</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.2.17-18" date="1643803200">- Fix Unsafe deserialization flaw in Chainsaw log viewer
- Fix SQL injection when application is configured to use JDBCAppender
- Fix remote code execution when application is configured to use JMSSink
- Resolves: CVE-2022-23307, CVE-2022-23305, CVE-2022-23302</changelog>
</package>
<package pkgid="1ec4cf5796e26faad8341e2cb3c47d885e1cddbf9ecec3d9df020bfcce521f43" name="lvm2" arch="src">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.3"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.186-7.el7_8.1" date="1584014400">- Fix failing pvs with locking_type 4.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
</package>
<package pkgid="9d25650e0958fe7f16e810986c58f9509326cc17d4fa48fa1443265e47f6d519" name="lvm2" arch="src">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.4"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-1" date="1585051200">- Bug fix release.
- See WHATS_NEW file for details.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
</package>
<package pkgid="c4c5d3e99c5f8e207d17506fac87b82d033060b4a5c635a4e04036a62f646686" name="lvm2" arch="src">
  <version epoch="7" ver="2.02.187" rel="6.el7_9.5"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-2" date="1587038400">- No validation for thin pools not used by lvm,
- Add support for VDO in blkdeactivate script.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-3" date="1589889600">- Add allow_mixed_block_sizes into lvm.conf.
- Update boom to version 1.1.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-4" date="1590494400">- boom: Fix traceback in error path.
- boom: Improve error path handling with --debug.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-5" date="1591531200">- Update boom to bug fix release 1.2.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6" date="1591531201">- Fix pvs/lvs/vgs failing due empty VG spotted in metadata when under load.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.1" date="1603108800">- Fix conversion to mirrored mirror log with larger regionsize.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.2" date="1603713600">- Fix dmeventd crash with modified reserved_stack configuration option.
- Fix lvm crashing when .cache file is changed by external tools.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.3" date="1606392000">- Fix lvresize handling of fsck exit code 1 - FS errors corrected.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.4" date="1612785600">- Fix fsadm behavior with missing parameters.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 7:2.02.187-6.el7_9.5" date="1615464000">- Fix fsadm failure due to accessing unbound variable.
- Fix segfault in vgextend when a PV is missing in the processed VG.</changelog>
</package>
<package pkgid="b7ff3692d877d3233bb8ff7f26c013ef46b0f4664c586e043fd2f1f59e744fbb" name="mailman" arch="src">
  <version epoch="3" ver="2.1.15" rel="30.el7_9.2"/>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-23" date="1487764800">- Resolves: #1232749 - fix bad subject of the welcome email when creating list
  using newlist command</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 3:2.1.15-24" date="1487764801">- Resolves: #1232737 - Fix instances of #!/usr/bin/env python in mailman</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-25" date="1518782400">- Resolves: #1545973 -  Fix XSS vulnerability in web UI</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-26" date="1519992000">- Resolves: #1545973 -  Add sanitizer for XSS mitigation</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-27" date="1521547200">- Related : #1545973 -  Bump release to override rhel-7.4.z version</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-28" date="1563796800">- Resolves: #1718180 - Try to decode member name first</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-29" date="1564574400">- Resolves: #1611689 -  Trim long text in "no such list" messages</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 3:2.1.15-30" date="1564574401">- Resolves: #1599692 - Sanitize input on listinfo page (CVE-2018-0618)</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3:2.1.15-30.1" date="1636459200">- Fix for CVE-2016-6893
- Fix for CVE-2021-42097
- Resolves: #2024884, #2020688</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3:2.1.15-30.2" date="1638100800">- Fix for CVE-2021-44227
- Resolves: #2026866</changelog>
</package>
<package pkgid="110f3ef6c8162226fba48b451638b9b9485054de1f075fd3b8cc7c8ed139c6ae" name="maven-shared-utils" arch="src">
  <version epoch="0" ver="0.4" rel="4.el7_9"/>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 0.2-1" date="1358337600">- Initial version</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0.2-2" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.2-4" date="1361275200">- Build with xmvn</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0.3-1" date="1363348800">- Update to upstream version 0.3</changelog>
  <changelog author="Michal Srb &lt;msrb@redhat.com&gt; - 0.3-2" date="1365422400">- Disable tests (they don't work with junit &gt;= 4.11)</changelog>
  <changelog author="Tomas Radej &lt;tradej@redhat.com&gt; - 0.4-1" date="1366632000">- Updated to latest upstream version
- Fixed and reenabled tests</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.4-2" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.4-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 0.4-4" date="1649419200">- Fix commandline injection vulnerability
- Resolves: rhbz#2068651</changelog>
</package>
<package pkgid="1ee73bb39b84987952670960a3a248143ca609037ba2cdc7916f3c0ba850d4cd" name="mdadm" arch="src">
  <version epoch="0" ver="4.1" rel="7.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.0-13" date="1518004800">- stop previous reshape process first 
- Resolves rhbz#1507415</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-1" date="1529668800">- Upgrade to upstream mdadm-4.1-rc1
- Resolves rhbz#1494472</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
</package>
<package pkgid="7b726a1675045631fee4fcff135d0d539949efc55d30615fc5e8d96818da723d" name="mdadm" arch="src">
  <version epoch="0" ver="4.1" rel="8.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-1" date="1529668800">- Upgrade to upstream mdadm-4.1-rc1
- Resolves rhbz#1494472</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.8" date="1632484800">- mdcheck start timer starts failure
- Resolves rhbz#1830736</changelog>
</package>
<package pkgid="a4f3e45ca7e3bff5fefe463f87a6d6b00f2fe694629b75f82d164dd4f8a45f0f" name="mdadm" arch="src">
  <version epoch="0" ver="4.1" rel="9.el7_9"/>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1-rc1-2" date="1533211200">- Fix two IMSM bugs
- Resolves rhbz#1602362 and rhbz#1602358</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.1" date="1552305600">- Update to upstream 4.1 and backport 21 patches after 4.1
- Resolves rhbz#1641473</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.2" date="1574424000">- imsm: fix spare activation for old matrix arrays
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.3" date="1575028800">- Fix CI building error
- Resolves rhbz#1773607</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.4" date="1581508800">- Innorrect UUID reported in volume detail
- Resolves rhbz#1789816</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.5" date="1585915200">- mdcheck continue/start service has grammer error
- Resolves rhbz#1774354</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.6" date="1589025600">- Update mdadm to latest upstream
- Resolves rhbz#1801605</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.7" date="1600689600">- Disable raid5 journal
- Resolves rhbz#1875457</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.8" date="1632484800">- mdcheck start timer starts failure
- Resolves rhbz#1830736</changelog>
  <changelog author="Xiao Ni &lt;xni@redhat.com&gt; - 4.1.9" date="1636372800">- imsm: After reboot put spare devices into right container.
- Resolves rhbz#2005306</changelog>
</package>
<package pkgid="4a18cdcf983a7e903fe80811263cde1c971adec5d4adece99059c6e0ea34be66" name="mesa" arch="src">
  <version epoch="0" ver="18.3.4" rel="12.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-3" date="1553601600">- fix remote shm</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-4" date="1553688000">- Enable i686 vulkan drivers for 32-bit apps</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-5" date="1554379200">- fix remote shm patch</changelog>
  <changelog author="Ben Crocker &lt;bcrocker@redhat.com&gt; - 18.3.4-6" date="1578312000">- Patch to require Large CodeModel for llvmpipe on ppc64/ppc64le (#1543572)</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 18.3.4-7" date="1579780800">- bump version and rebuild to avoind conflict with 7.7.z build (#1543572)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 18.3.4-8" date="1584100800">- Backport put/get shm fixes to EL7 (#1749699)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-9" date="1587384000">- Fix context sharing with multiple screens for i965</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 18.3.4-10" date="1592481600">- Revert the previous fix due to regressions in Firefox, Chrome, etc.</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-11" date="1603454400">- Backport upstream i965 multi-screen fixes (#1803811)</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 18.3.4-12" date="1603800000">- Fix for defect reported by Coverity/clang (#1803811)</changelog>
</package>
<package pkgid="8394c28a3770c63002b4c2c7bb0fbb433000a58e529a9941bac93d2b53a3644b" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.11.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059200">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
</package>
<package pkgid="e252526414f1788c7a94ec4f117c33400ea47f71f57df6fe896dd15111867f86" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.13.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268800">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
</package>
<package pkgid="3408dd8c215d8d306ca2a01e9eef9dc79e96ef5cbfe7322f2a03874321a084e2" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.14.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
</package>
<package pkgid="95e4f3fa093582341c266f68e46ee51f1e9732239498b8e9d35727ef22bb7c6d" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.15.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
</package>
<package pkgid="8f83febde5d35395362abb6451e43ae758c63a8d9df7bb7a8d23e118f27d3d49" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.16.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.16" date="1676462400">- Update Intel CPU microcode to microcode-20230214 release, addresses
  CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171238,
    - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
    0x2b000181;
  - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
    0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
    0x2c000170;
  - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
  - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
    revision 0x410e;
  - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
    revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xf0 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
    to 0xf4;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
    up to 0x1000161;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
    up to 0x4003303;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003302 up to 0x5003303;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
    up to 0x7002503;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
    up to 0xd000389;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
    to 0x22;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
    up to 0xb8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
    to 0x32;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
    to 0x42;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
    to 0x17;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
    up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
    up to 0x429;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
    up to 0x24000024;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
    to 0xf4;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf0 up to 0xf4;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
    to 0x57;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3).
- Change the logger severity level to warning to align with the kmsg one.</changelog>
</package>
<package pkgid="a21339685b3bd8cf84cd16160ce056318600c496b6faae1b3d046dd4211e0860" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.19.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.10" date="1627041600">- Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
  intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
  and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
- Enable 06-8c-01 microcode update by default.
- Enable 06-5e-03 microcode update by default (#1897684).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041601">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.16" date="1676462400">- Update Intel CPU microcode to microcode-20230214 release, addresses
  CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171238,
    - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
    0x2b000181;
  - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
    0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
    0x2c000170;
  - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
  - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
    revision 0x410e;
  - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
    revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xf0 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
    to 0xf4;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
    up to 0x1000161;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
    up to 0x4003303;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003302 up to 0x5003303;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
    up to 0x7002503;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
    up to 0xd000389;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
    to 0x22;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
    up to 0xb8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
    to 0x32;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
    to 0x42;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
    to 0x17;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
    up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
    up to 0x429;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
    up to 0x24000024;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
    to 0xf4;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf0 up to 0xf4;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
    to 0x57;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3).
- Change the logger severity level to warning to align with the kmsg one.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.17" date="1690891200">- Force locale to C in check_caveats, reload_microcode, and update_ucode.
- Cleanup the dangling symlinks in update_ucode.
- Avoid spurious find failures due to calls on directories that may not exist.
- Add support for the new, more correct, variant of dracut's default
  $fw_dir path in dracut_99microcode_ctl-fw_dir_override_module_init.sh.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.18" date="1691409600">- Update Intel CPU microcode to microcode-20230516 release:
  - Addition of 06-be-00/0x01 (ADL-N A0) microcode at revision 0x10;
  - Addition of 06-9a-04/0x40 (AZB A0) microcode at revision 0x4;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006e05 up
    to 0x2006f05;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa6 up to 0xaa;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000161
    up to 0x1000171;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003303
    up to 0x4003501;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003303 up to 0x5003501;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002503
    up to 0x7002601;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000389
    up to 0xd000390;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000211
    up to 0x1000230;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb8
    up to 0xba;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x32 up
    to 0x33;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x42 up
    to 0x44;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf0
    up to 0xf2;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xf0 up to 0xf2;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf0 up
    to 0xf2;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xf4 up to 0xf6;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c000170 up to
    0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000181
    up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c000170 up to
    0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000181
    up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x429 up to 0x42a;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x429 up to 0x42a;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x429 up to 0x42a;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x429
    up to 0x42a;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xf0 up to 0xf2;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf0
    up to 0xf2;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xf4 up to 0xf8;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf4 up
    to 0xf6;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf4 up to 0xf6;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x57 up
    to 0x58;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x112 up
    to 0x113;
  - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x410e up to 0x4112;
  - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x410e up to 0x4112;
  - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x410e up to 0x4112;
  - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode from revision 0x410e
    up to 0x4112.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.19" date="1691668800">- Update Intel CPU microcode to microcode-20230808 release, addresses
  CVE-2022-40982, CVE-2022-41804, CVE-2023-23908 (#2223994):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006f05 up
    to 0x2007006;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xaa up to 0xac;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171
    up to 0x1000181;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501
    up to 0x4003604;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003501 up to 0x5003604;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601
    up to 0x7002703;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390
    up to 0xd0003a5;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba
    up to 0xbc;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up
    to 0x2c;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf2
    up to 0xf4;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xf2 up to 0xf4;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf2 up
    to 0xf4;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xf6 up to 0xf8;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to
    0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461
    up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to
    0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461
    up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c
    up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x42a up to 0x42c;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a
    up to 0x42c;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xf2 up to 0xf4;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf2
    up to 0xf4;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xf8 up to 0xfa;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up
    to 0xf8;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf6 up to 0xf8;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up
    to 0x59;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x113 up
    to 0x119;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2c up
    to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2c up
    to 0x2e;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4112
    up to 0x4119 (old pf 0xc0);
  - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x10 up
    to 0x11 (old pf 0x1).</changelog>
</package>
<package pkgid="d6226a48b247f602b50d633ab10d173362867d4c98d0dd2fbb2407b18ef1a9ee" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.2.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-66" date="1589457600">- Update Intel CPU microcode to microcode-20200508 release (#1835549):
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46
    up to 0x78.
- Change the URL in the intel-microcode2ucode.8 to point to the GitHub
  repository since the microcode download section at Intel Download Center
  does not exist anymore.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-67" date="1590148800">- Update Intel CPU microcode to microcode-20200520 release (#1783103):
  - Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f
    up to 0x621;
  - Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718
    up to 0x71a.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-68" date="1591185600">- Update Intel CPU microcode to microcode-20200602 release, addresses
  CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795352, #1795355, #1827190):
  - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
  - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
    up to 0x2f;
  - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
    up to 0x26;
  - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
  - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
    up to 0x22;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
    up to 0x1000157;
  - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
    (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
    up to 0x2006906;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
    up to 0x4002f01;
  - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
    up to 0x5002f01;
  - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
    from revision 0xca up to 0xd6;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
    0xca up to 0xd6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
  - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-69" date="1591272000">- Avoid temporary file creation, used for here-documents in check_caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-70" date="1592136000">- Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
  0xdc, use 0xd6 by default (#1846133).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-71" date="1592222400">- Enable 06-55-04 (SKL-X/W) caveat by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222401">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222402">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
</package>
<package pkgid="77ffc9c624518caca9176786bf062aa8487081f104d62eb8fe3d5b74d854a812" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.20.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.11" date="1627041600">- Update Intel CPU microcode to microcode-20210608 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.12" date="1644235200">- Update Intel CPU microcode to microcode-20220204 release, addresses
  CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2051547, #2049549, #2049566):
  - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
    to 0xb000040;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
    to 0x2006c0a;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x46 up to 0x49;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
    up to 0x100015c;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
    up to 0x400320a;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003102 up to 0x500320a;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
    up to 0x7002402;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x700001b up to 0x700001c;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
    up to 0xf00001a;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000012 up to 0xe000014;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
    to 0x24;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
    up to 0xd000331;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
    up to 0xa8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
    to 0x2d;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
    to 0x22;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
    to 0x3c;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xea up to 0xec;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xea up
    to 0xec;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xea up to 0xec;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
    to 0x15;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
    to 0x2400001f;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xea up to 0xec;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xea
    up to 0xec;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xea up to 0xec;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xea up to 0xec;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
    to 0xec;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
    up to 0xec;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
    up to 0xee;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
    up to 0xea;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xea up to 0xec;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
    to 0x50.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.13" date="1644494400">- Update Intel CPU microcode to microcode-20220207 release:
  - Fixes in releasenote.md file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.14" date="1652184000">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090246,
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-97-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    at revision 0x1f;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
    revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) at revision 0x41c;
  - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) at revision 0x41c;
  - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    at revision 0x1f;
  - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) at revision 0x1f;
  - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    at revision 0x1f;
  - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
    to 0x2006d05;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xec up to 0xf0;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
    to 0xf0;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
    to 0xf0;
  - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
    to 0x90d;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
    up to 0x100015d;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
    up to 0x4003302;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x500320a up to 0x5003302;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
    up to 0x7002501;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
    to 0x48;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
    to 0x28;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
    up to 0xd000363;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
    to 0x1e;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
    up to 0xb0;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
    to 0x31;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
    to 0x26;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
    to 0x16;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
    up to 0x24000023;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
    to 0xf0;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
    up to 0xf0;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
    up to 0xf0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
    up to 0xf0;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xec up to 0xf0;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
    to 0x53.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.15" date="1660046400">- Update Intel CPU microcode to microcode-20220510 release, addresses
  CVE-2022-21233 (#2119080):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
    to 0x2006e05;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
    up to 0x100015e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
    up to 0xd000375;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
    to 0x3c;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
    up to 0xb2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
    to 0x28;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
    to 0x40;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
    0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
    up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x1f up to 0x22;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
    up to 0x421;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
    to 0x54;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x1f up to 0x22;
  - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
  - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x1f up to 0x22;
  - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
    to 0x22.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.16" date="1676462400">- Update Intel CPU microcode to microcode-20230214 release, addresses
  CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171238,
    - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
    0x2b000181;
  - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
    0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) at revision 0x2c000170;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) at revision 0x2b000181;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) at revision 0x2c000170;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
    revision 0x2c000170;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) at revision 0x2b000181;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
    0x2b000181;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
    0x2c000170;
  - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
  - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
    revision 0x410e;
  - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
    revision 0x410e;
  - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xf0 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
    to 0xf4;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
    up to 0x1000161;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
    up to 0x4003303;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003302 up to 0x5003303;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
    up to 0x7002503;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
    up to 0xd000389;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
    to 0x3e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
    to 0x22;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
    up to 0xb8;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
    to 0x32;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
    to 0x42;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
    to 0x17;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
    up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
    up to 0x429;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
    up to 0x24000024;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
    to 0xf4;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
    up to 0xf4;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf0 up to 0xf4;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
    to 0x57;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x22 up to 0x2c (old pf 0x3);
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
    0x2c (old pf 0x3).
- Change the logger severity level to warning to align with the kmsg one.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.17" date="1690891200">- Force locale to C in check_caveats, reload_microcode, and update_ucode.
- Cleanup the dangling symlinks in update_ucode.
- Avoid spurious find failures due to calls on directories that may not exist.
- Add support for the new, more correct, variant of dracut's default
  $fw_dir path in dracut_99microcode_ctl-fw_dir_override_module_init.sh.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.18" date="1691409600">- Update Intel CPU microcode to microcode-20230516 release:
  - Addition of 06-be-00/0x01 (ADL-N A0) microcode at revision 0x10;
  - Addition of 06-9a-04/0x40 (AZB A0) microcode at revision 0x4;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006e05 up
    to 0x2006f05;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa6 up to 0xaa;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000161
    up to 0x1000171;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003303
    up to 0x4003501;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003303 up to 0x5003501;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002503
    up to 0x7002601;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000389
    up to 0xd000390;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000211
    up to 0x1000230;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb8
    up to 0xba;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x32 up
    to 0x33;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x42 up
    to 0x44;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf0
    up to 0xf2;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xf0 up to 0xf2;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf0 up
    to 0xf2;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xf4 up to 0xf6;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c000170 up to
    0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000181
    up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c000170 up to
    0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000181
    up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c000170 up to 0x2c0001d1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b000181 up to 0x2b000461;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x429 up to 0x42a;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x429 up to 0x42a;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x429 up to 0x42a;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x429
    up to 0x42a;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xf0 up to 0xf2;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf0
    up to 0xf2;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xf0 up to 0xf2;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xf4 up to 0xf8;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf4 up
    to 0xf6;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf4
    up to 0xf6;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf4 up to 0xf6;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x57 up
    to 0x58;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x112 up
    to 0x113;
  - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x410e up to 0x4112;
  - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x410e up to 0x4112;
  - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x410e up to 0x4112;
  - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode from revision 0x410e
    up to 0x4112.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.19" date="1691668800">- Update Intel CPU microcode to microcode-20230808 release, addresses
  CVE-2022-40982, CVE-2022-41804, CVE-2023-23908 (#2223994):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006f05 up
    to 0x2007006;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xaa up to 0xac;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171
    up to 0x1000181;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501
    up to 0x4003604;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003501 up to 0x5003604;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601
    up to 0x7002703;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390
    up to 0xd0003a5;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba
    up to 0xbc;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up
    to 0x2c;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up
    to 0x46;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xf2
    up to 0xf4;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode from
    revision 0xf2 up to 0xf4;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xf2 up
    to 0xf4;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode from revision 0xf6 up to 0xf8;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to
    0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461
    up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to
    0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461
    up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c0001d1 up to 0x2c000271;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b000461 up to 0x2b0004b1;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c
    up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x42a up to 0x42c;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a
    up to 0x42c;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from
    revision 0xf2 up to 0xf4;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode from revision 0xf2
    up to 0xf4;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode from revision
    0xf2 up to 0xf4;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode from revision
    0xf8 up to 0xfa;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up
    to 0xf8;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6
    up to 0xf8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf6 up to 0xf8;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up
    to 0x59;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x113 up
    to 0x119;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2c up
    to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x2c up to 0x2e;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x2c up to 0x2e;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2c up
    to 0x2e;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4112 up to 0x4119 (old pf 0xc0);
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4112
    up to 0x4119 (old pf 0xc0);
  - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x10 up
    to 0x11 (old pf 0x1).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.20" date="1698840000">- Update Intel CPU microcode to microcode-20231009 release, addresses
  CVE-2023-23583 (RHEL-3920):
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xac up to 0xb4;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
    up to 0xd0003b9;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
    up to 0x1000268;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
    up to 0xc2;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
    to 0x34;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
    to 0x4e;
  - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
    0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
    up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
    0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
    up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000271 up to 0x2c000290;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c000271 up to 0x2c000290;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b0004b1 up to 0x2b0004d0;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x2e up to 0x32;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
    up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x2e up to 0x32;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x42c up to 0x430;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
    up to 0x430;
  - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
    to 0x5;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
    to 0x5d;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
    to 0x11d;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4119 up to 0x411c;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
    up to 0x411c;
  - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
    to 0x12;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2e up
    to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x2e up to 0x32;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x2e up to 0x32;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2e up
    to 0x32.</changelog>
</package>
<package pkgid="d749a34e6016673644e1b0c2c7ff208d5219cf21f9589a5d794675c952ee6dfe" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.4.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-68" date="1591185600">- Update Intel CPU microcode to microcode-20200602 release, addresses
  CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795352, #1795355, #1827190):
  - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
  - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
    up to 0x2f;
  - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
    up to 0x26;
  - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
  - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
    up to 0x22;
  - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
    up to 0x1000157;
  - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
    (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
    up to 0x2006906;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
    up to 0x4002f01;
  - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
    up to 0x5002f01;
  - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
    up to 0xdc;
  - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
    from revision 0xca up to 0xd6;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
    0xca up to 0xd6;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
  - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
    up to 0xd6;
  - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-69" date="1591272000">- Avoid temporary file creation, used for here-documents in check_caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-70" date="1592136000">- Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
  0xdc, use 0xd6 by default (#1846133).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-71" date="1592222400">- Enable 06-55-04 (SKL-X/W) caveat by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222401">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222402">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
</package>
<package pkgid="bc216a90d3e9700c56dd315fc4c257bc05f05f75b3eb1db3a31e73aac76ae11a" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.8.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-72" date="1592222400">- Enable 06-2d-07 (SNB-E/EN/EP) caveat by default (#1846023).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222401">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
</package>
<package pkgid="88458298ebd16988f185e283eafec6cc648e416e8677e6d859da93d4d5de2f33" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="73.9.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73" date="1592222400">- Update Intel CPU microcode to microcode-20200609 release (#1826589):
  - Fixed a typo in the release note file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.1" date="1604059200">- Add README file to the documentation directory.
- Add publicly-sourced codenames list to supply to gen_provides.sh; update
  the latter to handle the somewhat different format.
- Add SUMMARY.intel-ucode file containing metadata information from
  the microcode file headers.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.2" date="1604059201">- Update Intel CPU microcode to microcode-20201027 release, addresses
  CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
  (#1893261, #1893249, #1893229):
  - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
  - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
  - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
  - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
  - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
  - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
    0xe0;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
    to 0x2006a08;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
    to 0xe0;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xd6 up to 0xde;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
    to 0xde;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
    to 0xde;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x43 up to 0x44;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
    up to 0x1000159;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
    up to 0x4003003;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5002f01 up to 0x5003003;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
    to 0x40;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
    to 0x1e;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
    to 0x18;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
    up to 0xa0;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
    up to 0xe0.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.3" date="1605268800">- Disable 06-8c-01 (TGL-UP3/UP4 B1) microcode update by default.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.4" date="1605268801">- Update Intel CPU microcode to microcode-20201112 release:
  - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
    to 0x34;
  - Updated releasenote file.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.5" date="1607688000">- Do not use "grep -q" in a pipe in check_caveats.
- Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
  (#1905111).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.6" date="1613044800">- Backport check_dmi_val to check_caveats from RHEL 8.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.7" date="1613563200">- Remove 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.8" date="1613563201">- Update Intel CPU microcode to microcode-20210216 release (#1905111):
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
    to 0x2006a0a;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
    up to 0x4003006;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003003 up to 0x5003006.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-73.9" date="1622116800">- Update Intel CPU microcode to microcode-20210525 release, addresses
  CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
  (#1962659, #1962709, #1962729, #1962675):
  - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
  - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
  - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
  - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
    at revision 0xb00000f;
  - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
    at revision 0xb00000f;
  - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
  - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
  - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
  - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
  - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
  - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
  - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
    intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
  - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
    intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
    to 0xb00003e;
  - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
    intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
    to 0x2006b06;
  - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
    intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
    to 0xea;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xde up to 0xea;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
    to 0xea;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
    to 0xea;
  - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
    from revision 0x44 up to 0x46;
  - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
    to 0x19;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
    up to 0x100015b;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
    up to 0x4003102;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003006 up to 0x5003102;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
    up to 0x7002302;
  - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
    0x7000019 up to 0x700001b;
  - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
    up to 0xf000019;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe00000f up to 0xe000012;
  - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
    to 0x44;
  - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
    to 0x20;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
    to 0x34;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
    to 0x1a;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
    up to 0xa6;
  - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
    to 0x2a;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
    to 0xea;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
    up to 0xea;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
    up to 0xec;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
    up to 0xe8;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
    0xe0 up to 0xea.</changelog>
</package>
<package pkgid="47c318884ede3eba783537e4d7f3a254851f3ab09a6c604ce3bdb5174282c13d" name="mod_auth_mellon" arch="src">
  <version epoch="0" ver="0.14.0" rel="9.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1481330 Add diagnostic logging
- Resolves: rhbz#1295472 Add MellonSignatureMethod config option to set
  signature method used to sign SAML messages sent by Mellon.
  Defaults to original sha1.</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-1" date="1527854400">- Resolves: rhbz#1553885
- Rebase to current upstream release</changelog>
  <changelog author="&lt;jdennis@redhat.com&gt; - 0.14.0-2" date="1527854401">- Resolves: rhbz#1553885
- fix file permissions on doc files</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-3" date="1551787200">- Resolves: rhbz#1652980 - mod_auth_mellon Cert files name wrong when
                           hostname contains a number</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-4" date="1553256000">- Resolves: rhbz#1576719 - ECP flow not triggering, instead client access
                           secured resources without ECP authentication</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-5" date="1554206400">- Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-6" date="1554206401">- Apply the patch from the previous commit
- Resolves: rhbz#1692470 - CVE-2019-3877 mod_auth_mellon: open redirect
                           in logout url when using URLs with backslashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-7" date="1565092800">- Resolves: rhbz#1727789 - mod_auth_mellon fix for AJAX header name
                           X-Requested-With</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-8" date="1570622400">- Resolves: rhbz#1731052 - CVE-2019-13038 mod_auth_mellon: an Open Redirect via
                           the login?ReturnTo= substring which could facilitate
                           information theft [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 0.14.0-9" date="1581249600">- Resolves: rhbz#1791264 - Backport SameSite=None cookie from upstream to
                           support latest browsers</changelog>
</package>
<package pkgid="3aae1eb82c92529ea0af353a0c6db44497401bd0a4389e0657ee37db7cea9cda" name="mod_auth_openidc" arch="src">
  <version epoch="0" ver="1.8.8" rel="9.el7_9"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-1" date="1459252800">- Initial import
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-2" date="1459252801">- Add %check to run test
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 1.8.8-3" date="1459425600">- fix unit test failure caused by apr_jwe_decrypt_content_aesgcm()
  failing to null terminate decrypted string
  Resolves: bug#1292561 New package: mod_auth_openidc</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-4" date="1548763200">- Resolves: rhbz#1626299 - CVE-2017-6059 mod_auth_openidc: Shows
                           user-supplied content on error pages [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-5" date="1548763201">- Resolves: rhbz#1626297 - CVE-2017-6413 mod_auth_openidc: OIDC_CLAIM and
                           OIDCAuthNHeader not skipped in an "AuthType oauth20"
                           configuration [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-6" date="1584360000">- Resolves: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
                           issue exists in URLs with slash and backslash [rhel-7]
- Resolves: rhbz#1805067 - CVE-2019-14857 mod_auth_openidc: Open redirect
                           in logout url when using URLs with leading slashes
                           [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-7" date="1584360001">- Fix a regression in the previous patches
- Related: rhbz#1805748 - CVE-2019-20479 mod_auth_openidc: open redirect
                          issue exists in URLs with slash and backslash [rhel-7]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-8" date="1598443200">- Resolves: rhbz#1823762 - Backport SameSite=None cookie from
                           mod_auth_openidc upstream to support
                           latest browsers [rhel-7.9.z]</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.8.8-9" date="1602158400">- Rebuild to pick up the proper build tag
- Related: rhbz#1823762 - Backport SameSite=None cookie from
                          mod_auth_openidc upstream to support
                          latest browsers [rhel-7.9.z]</changelog>
</package>
<package pkgid="bf4c1984f8bc9313e2e8ccceaa593c4793f00ce1da7b3371328ba1fdad0bd8e6" name="mod_security_crs" arch="src">
  <version epoch="0" ver="2.2.9" rel="3.el7_9"/>
  <changelog author="Athmane Madjoudj &lt;athmane@fedoraproject.org&gt; 2.2.5-5" date="1347537600">- Enable extra rules sub-package for EPEL.</changelog>
  <changelog author="Athmane Madjoudj &lt;athmane@fedoraproject.org&gt; 2.2.6-1" date="1347710400">- Update to 2.2.6
- Update spec file since upstream moved to Github.</changelog>
  <changelog author="Athmane Madjoudj &lt;athmane@fedoraproject.org&gt; 2.2.6-2" date="1349092800">- Add a patch to fix incompatible rules.
- Update to new git release</changelog>
  <changelog author="Athmane Madjoudj &lt;athmane@fedoraproject.org&gt; 2.2.6-3" date="1350475200">- Remove the patch since we're requiring mod_security &gt;= 2.7.0
- Require mod_security &gt;= 2.7.0</changelog>
  <changelog author="Peter Vrabec &lt;pvrabec@redhat.com&gt; 2.2.6-4" date="1353326400">- "extras" subpackage is not provided on RHEL7</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.2.6-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.2.6-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 2.2.9-1" date="1459771200">- Rebased to version 2.2.9
- Fixed bogus date in the changelog
  Resolves: rhbz#1150614</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.9-2" date="1662379200">- Move response status rule to earlier phase
- Resolves: rhbz#2124200</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.2.9-3" date="1662552000">- Fix application of the response status patch
- Related: rhbz#2124200</changelog>
</package>
<package pkgid="32e866cc76158d49fb3cf8379aac8fa11c4af0aecd12d7e3844960b212929282" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="28.el7"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-19" date="1572350400">- Fix invalid read in idle monitor
  Resolves: #1752378</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-20" date="1575374400">- Free close dialog before unmanaging parent
  Related: #1753799</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
</package>
<package pkgid="042c822e8b94bce759b750b6b5c43cabddb477efe06d4e0d7d8cefff958d9a8a" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="30.el7"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-20" date="1575374400">- Free close dialog before unmanaging parent
  Related: #1753799</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
</package>
<package pkgid="8cddc40cf37cf40413eeb0b4c213a7a84ea1198dc6d5c36d065119c67c6d22c2" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="31.el7_9"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-21" date="1583409600">- Add PING_TIMEOUT_DELAY to mutter MetaPreferences
  Resolves: #1809164</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-31" date="1650888000">- Fix race condition causing stuck pointer grabs
  Resolves: #2054507</changelog>
</package>
<package pkgid="1f28cbe378b8070b9453a3557f829fe64bcfc3901141203e98d1515e2a410ebc" name="mutter" arch="src">
  <version epoch="0" ver="3.28.3" rel="32.el7_9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-22" date="1583496000">- Include one more close-dialog backport
  Related: #1753799</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-23" date="1587124800">- Improve performance under IO load
  Resolves: #1824869</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-24" date="1590494400">- Fix extended OSK keys
  Resolves: #1625306</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.28.3-25" date="1592395200">- Notify workspace layout changes
  Resolves: #1848103</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-26" date="1592827200">- Only treat WM_PROTOCOLS messages as WM_PROTOCOL messages
  Resolves: #1846242</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-27" date="1592827201">- Turn stacking warning into debug log
  Resolves: #1811029</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.28.3-28" date="1602676800">- Try to fix leaks
  Resolves: #1717000</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-30" date="1605182400">- Try to fix leaks even more and a log spew fix
  Resolves: #1897063</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt;) - 3.28.3-31" date="1650888000">- Fix race condition causing stuck pointer grabs
  Resolves: #2054507</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.28.3-32" date="1658923200">- Fix _NET_WM_FRAME_DRAWN timestamps when overflow occurs
  Resolves: #2128996</changelog>
</package>
<package pkgid="a7e7fc16f2326d14147d70bd1ab962c9b84d6ed68c5518b28dcf7958e602f5fd" name="ndctl" arch="src">
  <version epoch="0" ver="65" rel="6.el7_9"/>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 60.3-4" date="1532952000">- Apply all patches (Jeff Moyer)
- Related: bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 62-1" date="1535025600">- Rebase to v62 (Jeff Moyer)
  - a new monitor command / daemon
  - an ndctl udev rule for recording the unsafe shutdown count
  - smart error injection
  - create-namespace fix for fragmented namespaces
- Resolves: bz#1610649 bz#1611833 bz#1456320</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-1" date="1553256000">- Rebase to v64.1 (Jeff Moyer)
  - add security commands
  - fix broken udev rule for dirty shutdown count
- Resolves: bz#1634348 bz#1635441</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 64.1-2" date="1553688000">- Fix initramfs creating by forcing installation of libnvdimm.ko
- Related: bz#1634348</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.1.el7" date="1564056000">- Rebase to v65
  - clear-errors: new command to clear errors on a namespace
  - monitor: remove the requirement of a default config
  - sanitize-dimm: allow a zero-key for secure-erase
  - sanitize-dimm: preserve keys after an overwrite
  - load-keys: fix for non-TPM keys
- Fix test harness to run against the rhel7 test kernel modules
- Related: rhbz#1722481</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.2.el7" date="1564401600">- Remove 'daxctl migrate-device-model' command.  We won't
  support hot-plugging device dax into the memory hierarchy
  on RHEL 7.
- Resolves: rhbz#1734153</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.3.el7" date="1565092800">- modify nvdimm-security.conf touse '&amp;&amp;' instead of ';'
  Without this change, the module doesn't load
- Resolves: rhbz#1725405</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.4.el7" date="1565611200">- Add spaces to the add_driver directive in the dracut module
- Resolves: rhbz#1740383</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.5.el7" date="1568116800">- Once again attempt to fix nvdimm-security.conf
- Resolves: rhbz#1750199</changelog>
  <changelog author="Jeff Moyer &lt;jmoyer@redhat.com&gt; - 65.6.el7" date="1608292800">- add space to install_items in dracut config file
- Resolves: rhbz#1909233</changelog>
</package>
<package pkgid="c7a029b530fec72bd0d74df1f1d1c4f36d66da882b056ddd480902a6dca41699" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-41" date="1555502400">- secure magic variable to prevent daemon crash (#1635201)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
</package>
<package pkgid="a46276295a2351d575555b674962a19ce9ddb783d7d631fc4084f6a196096305" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-42" date="1557489600">- fix trapd crash when forward snmp v3 traps (#1680547)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
</package>
<package pkgid="adcf623795739acc932aae991880e7326bb6672ef59b9b9e4bcddd44e96ddb24" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.3"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-43" date="1558526400">- fix available memory calculation (#1250060)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
</package>
<package pkgid="81e3429ee9d5d4b8e6ef341aa92546b4c777d4dd85f44659e224d4d2cad86a77" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="49.el7_9.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-44" date="1565784000">- add support for glusterfs (#1316386)
- change services to start after network-online.target (#1388118)
- fix interface fadeout configuration (#1547355)
- fix scanf pattern for ICMP stats (#1693547)
- change buffer size in pass_common.c file (#1695363 and #1731357)
- remove initial whitespace reading from scanf pattern of /sys/dev/block/../stat file (#1700494)
- fix for CVE-2018-18066 (#1638911)
- add Counter64 support for UCD-SNMP-MIB (#1703752)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-45" date="1568721600">- fix memory leak introduced by fix of snmp v3 traps forwarding (#1751195)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-46" date="1575288000">- fix sha224 and sha384 declaration check (#1774693)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-47" date="1575892800">- revert calculation of free space (#1779609)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-48" date="1583928000">- fix crash due of double-free of security context (#1809076)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49" date="1591272000">- add missing part of memory leak patch (#1794168)
- fix if_inet6 messages floood (#1765449)
- revert bz#1486733 (#1771050)
- fix issue for process status when process name contains whitespace (#1782180)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.1" date="1605096000">- fix CVE-2020-15862 (#1875496)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.2" date="1646654400">- fix send response: Too long error (#2008696)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.3" date="1691668800">- fix sendmsg error code for new kernel (#2229858)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-49.4" date="1704801600">- fix a crash triggered by a wrong passphrase (RHEL-2882)</changelog>
</package>
<package pkgid="88336a51743879246b23801f51e676c54abeb54e4793ea3d8a8a0477294b5e5b" name="nettle" arch="src">
  <version epoch="0" ver="2.7.1" rel="9.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.6-2" date="1360152000">- nettle includes use gmp.h</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.6-3" date="1386936000">- Added patch nettle-tmpalloc.patch (#1033570)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.6-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.7.1-1" date="1389787200">- Updated to nettle 2.7.1</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-2" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-3" date="1406548800">- Added fipshmac checksum (#1117782)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-4" date="1406635200">- Correct path of links (#1117782)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-5" date="1456920000">- Fixed SHA-3 implementation to conform to final standard (#1252936)
- Fixed CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 which caused issues
  in secp256r1 and secp384r1 calculations (#1314374)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 2.7.1-8" date="1470657600">- Use a cache-silent version of mpz_powm to prevent cache-timing
  attacks against RSA and DSA in shared VMs. (#1364897,CVE-2016-6489)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 2.7.1-9" date="1617796800">- Port fixes for potential miscalculation in ecdsa_verify (#1943156)</changelog>
</package>
<package pkgid="abf03eca7b1b882fc890396d1f973d209cfd1edcf6499bfa60ecb2f1698a7d1c" name="nfs-utils" arch="src">
  <version epoch="1" ver="1.3.0" rel="0.68.el7.1"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.60" date="1534766400">- Updated: nfsd: Allow the caller to turn off NFSv4.0 (bz 1596138)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.61" date="1537963200">- nfs.conf: fail to disable major NFS version 4 using "vers4=n" (bz 1625032)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.62" date="1549886400">- statd: fix use-after-free in monitor list if insertion fails (bz 1624542)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.63" date="1552651200">- nfs.conf: Fixed manage-gids option typo (bz 1677403)
- sm-notify: Added -f flag to nfs.conf parsing (bz 1688932)
- Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1688918)
- nfs-server: Use reload not restart to start gssproxy (bz 1644169)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.64" date="1558612800">- rpc.mountd: Fix e_hostname and e_uuid leaks (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.65" date="1558612801">- Fixed typo of mountd-memleak.patch not being applied (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.66" date="1565006400">- nfs-utils_env.sh: Removed the hard coded number of nfsds (bz 1736801)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.67" date="1587729600">- rpc.gssd: removed a number memory leaks (bz 1807110)
- mount: Report correct error in the fall_back cases (bz 1752329)
- gssd: daemonize earlier (bz 1645083)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68" date="1591617600">- gssd: closed resource leak. (bz 1167629)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.1" date="1591704000">- exportfs: fix unexporting of '/' (bz 1958975)</changelog>
</package>
<package pkgid="e8d008494e63f50c2eac7ed153232e71460455dfcbd293ddc8dde05b3a1191ce" name="nfs-utils" arch="src">
  <version epoch="1" ver="1.3.0" rel="0.68.el7.2"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.61" date="1537963200">- nfs.conf: fail to disable major NFS version 4 using "vers4=n" (bz 1625032)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.62" date="1549886400">- statd: fix use-after-free in monitor list if insertion fails (bz 1624542)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.63" date="1552651200">- nfs.conf: Fixed manage-gids option typo (bz 1677403)
- sm-notify: Added -f flag to nfs.conf parsing (bz 1688932)
- Add nfs.conf equivalent for the statd --no-notify cmdline option (bz 1688918)
- nfs-server: Use reload not restart to start gssproxy (bz 1644169)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.64" date="1558612800">- rpc.mountd: Fix e_hostname and e_uuid leaks (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.65" date="1558612801">- Fixed typo of mountd-memleak.patch not being applied (bz 1711210)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.66" date="1565006400">- nfs-utils_env.sh: Removed the hard coded number of nfsds (bz 1736801)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.67" date="1587729600">- rpc.gssd: removed a number memory leaks (bz 1807110)
- mount: Report correct error in the fall_back cases (bz 1752329)
- gssd: daemonize earlier (bz 1645083)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68" date="1591617600">- gssd: closed resource leak. (bz 1167629)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.1" date="1591704000">- exportfs: fix unexporting of '/' (bz 1958975)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 1.3.0-0.68.2" date="1628596800">- gssd: mutex updates (bz 1990981)</changelog>
</package>
<package pkgid="3afd9bc2510ebd5796d3d8642667ac66ae5ee54dd48e8793992e3fa954352bea" name="nspr" arch="src">
  <version epoch="0" ver="4.32.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
</package>
<package pkgid="24c072971df4a7594aec272c1028965b588c8fc37697063c60d1c0e68b89998b" name="nspr" arch="src">
  <version epoch="0" ver="4.34.0" rel="3.1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.21.0-1" date="1553083200">- Rebase to NSPR 4.21</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-1" date="1654171200">- Rebase to NSPR 4.34 for firefox 102</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-2" date="1654689600">- Fix coverity issue</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3" date="1655380800">- return the AI_PASSIVE result so servers can connect to all
  clients</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3.1" date="1659528000">- Actually apply the patch in -3</changelog>
</package>
<package pkgid="e6911ec4bd79113f78d7c12c571cf2560ff1fa7269cd912055f39e90e25140fb" name="nspr" arch="src">
  <version epoch="0" ver="4.35.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-1" date="1591876800">- Rebase to NSPR 4.25</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.25.0-2" date="1595246400">- Rebuild to fix wrong dist tag</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.30.0-1" date="1622721600">- Rebase to NSPR 4.30</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.31.0-1" date="1623931200">- Rebase to NSPR 4.31</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.32.0-1" date="1629720000">- Rebase to NSPR 4.32 for firefox 91</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-1" date="1654171200">- Rebase to NSPR 4.34 for firefox 102</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-2" date="1654689600">- Fix coverity issue</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3" date="1655380800">- return the AI_PASSIVE result so servers can connect to all
  clients</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 4.34.0-3.1" date="1659528000">- Actually apply the patch in -3</changelog>
  <changelog author="Frantisek Krenzelok &lt;krenzelok.frantisek@gmail.com&gt; - 4.35.0-1" date="1687953600">- Rebase to NSPR 4.35 for firefox 115
- Move from deprecate %patchN format</changelog>
</package>
<package pkgid="e7f476666229eabfb53d2624da2a7874135cd38e38d0414699167eeaa70c98a5" name="nss" arch="src">
  <version epoch="0" ver="3.53.1" rel="7.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-6" date="1575460800">- Fix out-of-bounds write in NSC_EncryptUpdate (#1775911,#1775910)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-7" date="1575547200">- back out out-of-bounds patch (patch for nss-softokn).
- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-8" date="1575633600">- Increase timeout on ssl_gtest so that slow platforms can complete when
   running on a busy system.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1596110400">- Disable TLS 1.3 by default</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
</package>
<package pkgid="1eae04a414eea67be96772d2e821ee013909076792fdf00919fc579157148a82" name="nss" arch="src">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-3" date="1596283200">- Disable dh timing test because it's unreliable on s390 (from Bob Relyea)
- Explicitly enable upgradedb/sharedb test cycles</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631448000">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
</package>
<package pkgid="73909b2ad541296d4f627881087691b876cd84a763e56006793889c279fa4f95" name="nss" arch="src">
  <version epoch="0" ver="3.67.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-4" date="1612180800">- Fix deadlock issue
- Fix 3 FTBS issues, 2 expired certs, one semantic change in nss-softokn.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-5" date="1613649600">- Fix CVE 2020-256423 TLS flood DOS Attack.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1613995200">- Update to CVE 2020-256423 TLS flood DOS attack patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-7" date="1614772800">- Fix HSM load failure because of CKO_Profile
- Allow builds with strict-proto</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
</package>
<package pkgid="b22aa60150707e34b77fb69e2ace9795eb95904d26cc3f2c7744c38afe902b35" name="nss" arch="src">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
</package>
<package pkgid="ee32bc2b3efc4e5668bbf1fe9abc9cd5622ec2ab9fa8a1d99e3f616d0bad784d" name="nss" arch="src">
  <version epoch="0" ver="3.79.0" rel="5.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- restore pkcs12 defaults</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1624363200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
</package>
<package pkgid="032d2dc08e9282c7663379672361e1c57797563e72d1d6a6a72d440615f69bf4" name="nss" arch="src">
  <version epoch="0" ver="3.90.0" rel="2.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1625659200">- fix sdb timeout issue
- fix incorrect ssl alerts in Signature scheme processing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631620800">- revert sql default language in man pages
- fix SEC_PKCS12EnableCipher so python-nss tests will still work.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-4" date="1637236800">- fix CVE-2021-43527</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654689600">- Rebase to NSS 3.79
- Set FIPS Module ID</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654948800">- fix regressions found in test suite</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1657108800">- fix crash in curl. better fix for the regression below</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1658404800">- fix regression for pkcs12.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-5" date="1678276800">- fix CVE-2023-0767</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687348800">- Rebase to NSS 3.90</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-2" date="1691409600">- fix EMS bug
- disbale ECH
- fix gtests in spec file
- restore missing test case</changelog>
</package>
<package pkgid="7cdc891803bc8cf28743336e57144ee964bc3f08bf497382bcb56ae43aa27a19" name="nss-pem" arch="src">
  <version epoch="0" ver="1.0.3" rel="7.el7_9.1"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.2-1" date="1485259200">- imported into RHEL-7</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.2-2" date="1487073600">- explicitly conflict with all nss builds with bundled nss-pem</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-1" date="1488369600">- update to latest upstream bugfix release (#1427917)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-2" date="1488801600">- require at least the version of nss that nss-pem was built against (#1428965)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-3" date="1493121600">- remove implementation of the WaitForSlotEvent callback (#1445384)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-4" date="1493208000">- fix missing prototypes detected by Covscan</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-5" date="1533729600">- update object ID while reusing a certificate (#1610998)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-6" date="1547467200">- fix performance regression in libcurl (#1659108)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-7" date="1551268800">- reintroduce implementation of the WaitForSlotEvent callback (#1615980)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; 1.0.3-7.el7_9.1" date="1681300800">- support a scenario where 2 distinct encrypted private keys are used (#2121064)</changelog>
</package>
<package pkgid="f7f075a9a4879b1bf8f52309359307c7b8543e2306f094e8dbb42f9c03a91466" name="nss-softokn" arch="src">
  <version epoch="0" ver="3.67.0" rel="3.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595419200">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-2" date="1595419201">- Install cmac.h required by blapi.h (#1764513)</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-3" date="1598529600">- include patches for CVE-2020-6829, CVE-2020-12400,
  and CVE-2020-12401 from upstream (ECC constant time issues).
- include patches for CVE-2020-12403 from upstream
  (CHACHA issues).
- include self-tests for kdfs and cmac.</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-4" date="1599134400">- Fix glibc regression in the rebase; run RNG self-tests only if NSPR is linked</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134401">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
</package>
<package pkgid="0cbb20a5b1a3d7b6308bad6a68c3218d280c450828fc6cd4a8d5fe9a1cfc7435" name="nss-softokn" arch="src">
  <version epoch="0" ver="3.79.0" rel="4.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-5" date="1599134400">- Fix the patch application in the previous change</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.53.1-6" date="1599825600">- turn off ALTIVEC instruction for powerpc because they require
  power8 and we need to support power7 on RHEL7 still.
- Fix typo in measure.
- Make sure only 2048 and greater primes are used in FIPS mode
  for dh.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
</package>
<package pkgid="4b3d9a9d78ab8b432ef9a3f73bc5cd34cac4d547ddc3edacf25281bd872271ef" name="nss-softokn" arch="src">
  <version epoch="0" ver="3.90.0" rel="6.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-2" date="1623758400">- fix crash in freebl when called by libcrypt</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-2" date="1623931200">- Rebase to NSS 3.67</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-3" date="1631102400">- Include softoken specific patches required by the NSS 3.67
  release including:
-  sdb timeout fixes.
-  coverity patch.
-  fixing private key macing</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654257600">- Rebase to NSS 3.79.
- add reader/writer lock on encrypted attribute access
- skip attribute verification on attributes with default values
- don't export trust objects if they are default trust objects from dbm</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-2" date="1654862400">- include dbtool</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-3" date="1655208000">- fix test regression: freebl crash when nss-util not loaded</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-4" date="1655467200">- increase the cache for the pbe</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-5" date="1692100800">- Fix pbkdf indicators</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-6" date="1692100801">- Fix double free issue when using dsa check files</changelog>
</package>
<package pkgid="8fe74a95091599bda60bf9e57e7d78fd2f81eb77e2cd0754c17e2e9126ec8fa4" name="nss-util" arch="src">
  <version epoch="0" ver="3.67.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
</package>
<package pkgid="7b3f4431184586c7e3774d4a1e37e1fd30623d5e8e19afee394b3ffdbe225fda" name="nss-util" arch="src">
  <version epoch="0" ver="3.79.0" rel="1.el7_9"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1542024000">- Update the cert verify code to allow a new ipsec usage and follow RFC 4945</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
</package>
<package pkgid="8292c12f02b13b170af5973923825f08148f437c55ec01728f5b62cfa8382721" name="nss-util" arch="src">
  <version epoch="0" ver="3.90.0" rel="1.el7_9"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.43.0-1" date="1553169600">- Rebase to NSS 3.43</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.44.0-1" date="1557921600">- Rebase to NSS 3.44</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-2" date="1558526400">- Add ike mechanisms</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-3" date="1559736000">- Add pub from priv mechanism
- ike mechanisms should not overlap with JPAKE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.44.0-4" date="1575547200">- Fix segfault on empty or malformed ecdh keys (#1777712)</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.53.1-1" date="1595246400">- Rebase to NSS 3.53.1</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.66.0-1" date="1622721600">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.67.0-1" date="1623931200">- Rebase to NSS 3.66</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.79.0-1" date="1654171200">- Rebase to NSS 3.79</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.90.0-1" date="1687262400">- Rebase to NSS 3.90
- Replace deprecate %patchN syntax</changelog>
</package>
<package pkgid="b747470698a867e3b84a7923cd6522fef820abe387aaafbaffb2b4db73a020fd" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.1"/>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.2.5-2" date="1525867200">- Use tirpc for Fedora 28 onwards.</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
</package>
<package pkgid="ec72473175f298b436f3c17b45abaa62fb578ee45710e05770a62b4a5806b929" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10-2.5-3" date="1534852800">- ovt-Workaround-for-false-negative-result-when-detecting.patch [bz#1601559]
- Resolves: bz#1601559
  ([ESXi][RHEL7.6] Include new open-vm-tools patches for cloud-init to work with python-2)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
</package>
<package pkgid="035228bc077a20789701698d849c8b30b539c481b1e3433fec9bc36bf177dc18" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-1" date="1549972800">- Updated RHEL version
- Resolves: bz#1667549
  ([RHEL 7.7, ESXi] Rebase open-vm-tools to 10.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
</package>
<package pkgid="cf76a01266225734987665bb3af516dfffc4b92a5a003ce4d39e2aa7440dd599" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.0-2" date="1552478400">- ovt-Enable-cloud-init-by-default-to-change-the-systemd-u.patch [bz#1662278]
- ovt-Fix-RELRO-flag.patch [bz#1678576]
- Resolves: bz#1662278
  ([ESXi][RHEL7.7]Enable cloud-init by default to change the systemd unit file vmtoolsd.service)
- Resolves: bz#1678576
  ([ESXi][RHEL7.6] Several files lost Full RELRO)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-1" date="1566475200">- Rebase to 10.3.10 [bz#1725187]
- Resolves: bz#1725187
  ([ESXi][RHEL7.8 ]Rebase open-vm-tools to 10.3.10)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
</package>
<package pkgid="5aca6c63e1c60fa3a85871f6dac874b257d5e0751443e3096c34bc2c17154dca" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.3.10-2" date="1572868800">- ovt-Fix-memory-leaks-in-vix-tools-plugin.patch [bz#1760625]
- ovt-End-VGAuth-impersonation-in-the-case-of-error.patch [bz#1760625]
- ovt-Fix-leaks-in-ListAliases-and-ListMappedAliases-9bc72.patch [bz#1760625]
- Resolves: bz#1760625
  ([ESXi][RHEL7.8]Need to backport some severe memory leak fixes from upstream)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
</package>
<package pkgid="29c1859c0a5cd8a067be63e16bd81b65fe0363e4eb6282530c4bad75fcf6bd2d" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.7"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-1" date="1584446400">- Rebase to 11.0.5 [bz#1806675]
- Resolves: bz#1806675
 ([ESXi][RHEL7.9]Rebase open-vm-tools to 11.0.5 for RHEL 7.9)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-2.el7" date="1585828800">- ovt-Fix-ldconfig-call.patch [bz#1815549]
- ovt-add-appinfo-plugin.patch [bz#1809753]
- Resolves: bz#1809753
  ([ESXi][RHEL7.9]open-vm-tools add appinfo plugin patch)
- Resolves: bz#1815549
  ([ESXi][RHEL7.9]open-vm-tools reports line 1: ?ldconfig: command not found during system installation)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
</package>
<package pkgid="97a777315c98608797451aeec1c3aed8dfc339c188c88f871b1890c84ab2c1fb" name="open-vm-tools" arch="src">
  <version epoch="0" ver="11.0.5" rel="3.el7_9.9"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7" date="1586260800">- ovt-Fix-a-trivial-memory-leak-in-namespacetool.c.patch [bz#1818109]
- ovt-Update-copyright-to-reflect-previous-change.patch [bz#1818109]
- Resolves: bz#1818109
  ([ESXi][RHEL7.9]open-vm-tools coverity scan issue)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.1" date="1603368000">- ovt-Updated-PAM-configuration-file-to-follow-configured-.patch [bz#1840309]
- Resolves: bz#1840309
  ([ESXi][RHEL7]vmtoolsd authentication issues with ActiveDirectory (AD) [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.2" date="1613476800">- ovt-Rectify-a-log-spew-in-vmsvc-logging-vmware-vmsvc-roo.patch [bz#1911853]
- Resolves: bz#1911853
  ([ESXi][RHEL7.9][ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name; VMDK mapping unavailable for "/", fsName: "/dev/sda2")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.3" date="1617710400">- ovt-Fix-memory-leaks-in-guestInfo-diskInfo.c.patch [bz#1937420]
- Resolves: bz#1937420
  ([ESXi][RHEL7.9] Memory leak in vmtoolsd when disable-query-diskinfo is set to false [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.4" date="1662120000">- ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119310]
- Resolves: bz#2119310
  (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-7.9.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.5" date="1684929600">- ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590]
- Resolves: bz#1880404
  ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml')
- Resolves: bz#1994590
  ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.6" date="1687780800">- ovt-Remove-some-dead-code.patch [bz#2215562]
- Resolves: bz#2215562
  ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.7" date="1694088000">- ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413]
- Resolves: RHEL-2413
  (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 11.0.5-3.el7_9.8" date="1695902400">- ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [bz#2226921]
- Resolves: bz#2226921
  ([RHEL7.9][ESXi]Latest version of open-vm-tools breaks VM backups)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 11.0.5-3.el7_9.9" date="1698926400">- ovt-Don-t-accept-tokens-with-unrelated-certs.patch [RHEL-14642]
- ovt-File-descriptor-vulnerability-in-the-open-vm-tools-v.patch [RHEL-14676]
- Resolves: RHEL-14642
  (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-7.9.z])
- Resolves: RHEL-14676
  (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-7.9.z])</changelog>
</package>
<package pkgid="ea088cba7806a25a7799ebab50a7a10c7fbc02c6fbd5f8d19e7aa6f4330c8d72" name="opencryptoki" arch="src">
  <version epoch="0" ver="3.12.1" rel="3.el7_9"/>
  <changelog author="Sinny Kumari &lt;skumari@redhat.com&gt; - 3.10.0-2" date="1535025600">- Resolves: #1613743 - ICA Token specific des3 cbc encrypt failed - token not available</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-1" date="1550577600">- Resolves: #1063763 - opencryptoki tools should inform the user that he is not in pkcs11 group 
- Resolves: #1641027 - enhanced IBM z14 functions
- Resolves: #1641026 - support m_*Single functions from ep11 lib
- Resolves: #1641025 - rebase to 3.11.0
- Resolves: #1519386 - use CPACF hashes in ep11 token
- Resolves: #1373833 - lock file directory is %ghost now</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-2" date="1550750400">- Resolves: #1678788 - EP11 token fails when using Strict-Session mode or VHSM-Mode</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-3" date="1552564800">- Resolves: #1688891 - C_EncryptInit fails with CKR_KEY_TYPE_INCONSISTENT. on ep11 token when using imported RSA public key</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-4" date="1569499200">- Resolves: #1755463, EP11: Support tolerated new crypto cards</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.11.0-5" date="1569844800">- Resolves: #1756956, ICA HW token missing after the package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.0-1" date="1573560000">- Resolves: #1770883, rebase to 3.12.0</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-1" date="1574942400">- Related: #1770883, rebase to 3.12.1</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-2" date="1576497600">- Resolves: #1782444, EP11: Fix EC-uncompress buffer length</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 3.12.1-3" date="1601294400">- Resolves: #1883185, opencryptoki - do_DeriveDHKey FAIL</changelog>
</package>
<package pkgid="a848967d11820d0088f06ea7f9c68e249b5486cff462a4712925ad3985aab272" name="openldap" arch="src">
  <version epoch="0" ver="2.4.44" rel="23.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
</package>
<package pkgid="ac65f8bafdd5024ba0c9b99ddc4a2cd315d3f139fa697093ac4ba87bc0428f2e" name="openldap" arch="src">
  <version epoch="0" ver="2.4.44" rel="24.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1547922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
</package>
<package pkgid="f46d3a99f2cbca70f8f43befcf921e3d3cf605d959dd2fe1236067f3790cb174" name="openldap" arch="src">
  <version epoch="0" ver="2.4.44" rel="25.el7_9"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-16" date="1522843200">- fix: back-ldap StartTLS short connection timeout with high latency connections (#1540336)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-17" date="1529582400">- MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1575549)
- Reset OPTIND in libexec/functions for getopts to work in subsequent calls (#1564382)
- MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1543451)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-18" date="1529582401">- MozNSS Compat. Layer: Make log messages more clear (#1543955)
- Build with LDAP_USE_NON_BLOCKING_TLS (#1471039)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-19" date="1534248000">- Backport upstream fixes for ITS 7506 - fix OpenSSL DH params usage (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-20" date="1534852800">- Backport upstream fixes for ITS 7595 - add OpenSSL EC support (#1584922)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-21" date="1545134400">- MozNSS Compat. Layer: Protect /tmp/openldap-tlsmc-* files (#1590184)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-22" date="1591444800">- Fix CVE-2020-12243 openldap: denial of service via nested boolean expressions in LDAP search filters (#1838405)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-23" date="1609761600">- Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd (#1895328)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-24" date="1628078400">- CLDAP ldap_result hangs if nobody listens on the port (#1989919)</changelog>
  <changelog author="Simon Pichugin &lt;spichugi@redhat.com&gt; - 2.4.44-25" date="1642593600">- Fix CVE-2020-25709 openldap: assertion failure in Certificate List syntax validation (#2040539)
- Fix CVE-2020-25710 openldap: assertion failure in CSN normalization with invalid input (#2040538)</changelog>
</package>
<package pkgid="5654c873a5ce0f58ebe7010de568360bf01d8bb80aa9fd2ddb75ae27d0ec6976" name="opensc" arch="src">
  <version epoch="0" ver="0.19.0" rel="4.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-5.20170227git" date="1495108800">- Add missing pkcs11-switch script</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-6.20170227git" date="1509710400">- Use label from certificate DN if there is none (#1448555)
- Use Cardholder name in the token label (#1449740)
- Avoid infinite loop when reading CAC cards (#1473335)
- Workaround for CAC Alt tokens (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-7.20170227git" date="1510056000">- Fix issues reported by Coverity
- Use upstream accepted fix for CAC Alt tokens (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-8.20170227git" date="1514980800">- Copy labels from certificate (#1448555)
- Avoid infinite loop in CAC driver when reading non-CAC cards (#1473335)
- Properly parse Simple TLV structures in CAC driver (#1473418)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-9.20170227git" date="1529409600">- make ECPoint behavior standards compliant by default (#1562572)
- allow mechanism to be specified in hexadecimal (#1562572)
- Disable pinpad by default (#1547117, #1547744)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.16.0-10.20170227git" date="1530619200">- Improve support for ECC-enabled CardOS 5.3 card (#1562277)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-1" date="1549540800">- Rebase to new upstream release (#1656791)
  - Add Support for HID Crescendo 144K (#1612372)
  - Add Support for CAC Alt tokens (#1645581)
  - Fix usage detection from certificates (#1672898)
  - Fix security issues:
    - CVE-2018-16391
    - CVE-2018-16392
    - CVE-2018-16393
    - CVE-2018-16418
    - CVE-2018-16419
    - CVE-2018-16420
    - CVE-2018-16421
    - CVE-2018-16422
    - CVE-2018-16423
    - CVE-2018-16426
    - CVE-2018-16427</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-2" date="1553688000">- Make OpenSC multilib again by moving the conflicting files on ix86 arch</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-3" date="1553688001">- Make OpenSC multilib also on s390 and ppc arches</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 0.19.0-4" date="1605268800">- Support PIN change for HID Alt tokens (#1893856)</changelog>
</package>
<package pkgid="9579ee4a8e59551fdedc63e415ebf1f8d802d11c5cea3c26f3648f21ee42a890" name="openscap" arch="src">
  <version epoch="0" ver="1.2.17" rel="13.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-4" date="1559822400">- Make is_local_fs static again to avoid API changes between releases</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
</package>
<package pkgid="9c454b3c0d82997bea00f2841b1b89ec327eb7756006672442a891cbdb849e9d" name="openscap" arch="src">
  <version epoch="0" ver="1.2.17" rel="14.el7_9"/>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 1.2.17-5" date="1572609600">- Fixed XSLT template making rule details in reports accessible for screenreader users (#1767826)</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
  <changelog author="Marcus Burghardt &lt;maburgha@redhat.com&gt; - 1.2.17-14" date="1628683200">- Fix memory leaks in probe-api (RHBZ#1861793)
- Prevent duplicate variables in Ansible Playbooks (RHBZ#1944683)
- Fix trailing whitespace in Ansible Playbooks
- Fix inconsistent result from security_patches_up_to_date (RHBZ#1858502)
- Fix multiple segfaults and broken test (RHBZ#1911999)
- Improve --stig-viewer output when there is no 1:1 connection between rules
- Lower memory limits and improve their checking (RHBZ#1932833)</changelog>
</package>
<package pkgid="d6852135f7b4560e731ae82374c7d3e211e159f9d6281a069647f216208a2be2" name="openscap" arch="src">
  <version epoch="0" ver="1.2.17" rel="15.el7_9"/>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.17-6" date="1573041600">- Enabled the virtual '(all)' profile support for the scanner (RHBZ#1769272).
- Enabled the '(all)' profile support for oscap-ssh (RHBZ#1769272).</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-7" date="1574164800">- Use and return canonical paths in rpmverifyfile probe (RHBZ#1766489)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-8" date="1574942400">- Add RHEL 8 CPE (RHBZ#1777860)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-9" date="1578398400">- Add new DISA STIG Viewer URI (RHBZ#1783200)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-10" date="1584619200">- Fix segfault in systemdunitdependency probe (RHBZ#1478285)
- Build and ship HTML manual (RHBZ#1465661)
- Fix oscap-ssh with --sudo (RHBZ#1803114)
- Change category of verbose message (RHBZ#1640522)
- Fix segfault in CVRF module (RHBZ#1642283)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-11" date="1588075200">- Fix URL for Red Hat Errata (RHBZ#1828779)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-12" date="1596801600">- Fix memory leaks in rpmverifyfile probe (RHBZ#1861300)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-13" date="1600689600">- Enable gzip compression when downloading remote content (RHBZ#1870147)</changelog>
  <changelog author="Marcus Burghardt &lt;maburgha@redhat.com&gt; - 1.2.17-14" date="1628683200">- Fix memory leaks in probe-api (RHBZ#1861793)
- Prevent duplicate variables in Ansible Playbooks (RHBZ#1944683)
- Fix trailing whitespace in Ansible Playbooks
- Fix inconsistent result from security_patches_up_to_date (RHBZ#1858502)
- Fix multiple segfaults and broken test (RHBZ#1911999)
- Improve --stig-viewer output when there is no 1:1 connection between rules
- Lower memory limits and improve their checking (RHBZ#1932833)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.17-15" date="1675166400">- Prevent memory errors (rhbz#2111041)</changelog>
</package>
<package pkgid="9f5e8db890e649d47399bff09eb5194f435a1fd23084ba2f84bf8d9c703316d3" name="opensm" arch="src">
  <version epoch="0" ver="3.3.21" rel="4.el7_9"/>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-1" date="1412856000">- Update to latest upstream release
- Resolves: bz1061587, bz1042745, bz884555, bz948475</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.18-2" date="1413547200">- Fix an issue found by rpmdiff
- Related: bz1061587</changelog>
  <changelog author="Doug Ledford &lt;dledford@redhat.com&gt; - 3.3.19-1" date="1433505600">- Update to latest upstream release
- Build on s390
- Related: bz1186159</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-1" date="1508155200">- Cleanup the spec file
- Rebase to latest upstream release 3.3.20
- Resolves: bz1456524</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-2" date="1509537600">- Fix up preuninstall script
- Resolves: bz1508334</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.20-3" date="1529409600">- Fix BuildRequires
- Resolves: bz1567528</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-1" date="1548072000">- Rebase to latest upstream release 3.3.21
- Resolves: bz1535978, bz1653660</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-2" date="1550059200">- Fix a few defects
- Resolves: bz1668201</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-3" date="1588075200">- Fix subnet_prefix issue
- Resolves: bz1828452</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.21-4" date="1607428800">- Allow MCMR requests with default subnet prefix
- Resolves: bz1898273</changelog>
</package>
<package pkgid="843894406ecbb611e5494b3665f0bcd14c2a76a39a6c8b1fa8a40a8f0d224529" name="openssh" arch="src">
  <version epoch="0" ver="7.4p1" rel="22.el7_9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-13 + 0.10.3-1" date="1505304000">- Revert default of GSSAPIStrictAcceptorCheck=no back to yes (#1488982)</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
</package>
<package pkgid="0ab5b78a5dd38e8ef80e5bd7ce6e8ee8f8764b7dafb7008991a834bec2cec23b" name="openssh" arch="src">
  <version epoch="0" ver="7.4p1" rel="23.el7_9"/>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 7.4p1-14 + 0.10.3-2" date="1509710400">- Rebuilt for RHEL-7.5</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-15 + 0.10.3-2" date="1509969600">- Do not hang if SSH AuthorizedKeysCommand output is too large (#1496467)
- Do not segfault pam_ssh_agent_auth if keyfile is missing (#1494268)
- Do not segfault in audit code during cleanup (#1488083)
- Add WinSCP 5.10+ compatibility (#1496808)
- Clatch between ClientAlive and rekeying timeouts (#1480510)
- Exclude dsa and ed25519 from default proposed keys in FIPS mode (#1456853)
- Add enablement for openssl-ibmca and openssl-ibmpkcs11 (#1478035)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-16 + 0.10.3-2" date="1511524800">- Fix for CVE-2017-15906 (#1517226)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-17 + 0.10.3-2" date="1547467200">- Fix for CVE-2018-15473 (#1619079)
- Enable GCM mode for AES ciphers in FIPS mode (#1600869)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-18 + 0.10.3-2" date="1550059200">- invalidate supplemental group cache used by temporarily_use_uid()
  when the target uid differs (#1583735)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-19 + 0.10.3-2" date="1551700800">- Update cached passwd structure after PAM authentication (#1674541)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-20 + 0.10.3-2" date="1558440000">- Revert the updating of cached passwd structure (#1712053)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 7.4p1-21 + 0.10.3-2" date="1561464000">- Avoid double comma in the default cipher list in FIPS mode (#1722446)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-22 + 0.10.3-2" date="1633003200">- avoid segfault in Kerberos cache cleanup (#1999263)
- fix CVE-2021-41617 (#2008884)</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 7.4p1-23 + 0.10.3-2" date="1689854400">- Avoid remote code execution in ssh-agent PKCS#11 support
  Resolves: CVE-2023-38408</changelog>
</package>
<package pkgid="3995b34ff2dc26fa5d5c88115b4254b0a56dcf6a1eca16301b59ef7fd1ed838a" name="openssl" arch="src">
  <version epoch="1" ver="1.0.2k" rel="21.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-11" date="1512561600">- fix deadlock in RNG in the FIPS mode in mariadb</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
</package>
<package pkgid="e9e46268dfdaa22b2a1e22e873b90fd60e01acda5eea554216f20c53ba01cca3" name="openssl" arch="src">
  <version epoch="1" ver="1.0.2k" rel="22.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-12" date="1513166400">- fix CVE-2017-3737 - incorrect handling of fatal error state
- fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
</package>
<package pkgid="c969fc5fbd1609f96a9991db6a75570285a71df0a5ccf60bececc667ea5c591f" name="openssl" arch="src">
  <version epoch="1" ver="1.0.2k" rel="23.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-13" date="1529323200">- add S390x assembler updates
- make CA name list comparison function case sensitive (#1548401)
- fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
- fix CVE-2018-0732 - large prime DH DoS of TLS client
- fix CVE-2018-0737 - RSA key generation cache timing vulnerability
- fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
</package>
<package pkgid="4d570697de0546dc09fe9a202bbecad429c47155a240b88126c1f3d74d32a6e1" name="openssl" arch="src">
  <version epoch="1" ver="1.0.2k" rel="24.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-14" date="1529409600">- ppc64le is not multilib architecture (#1585004)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
</package>
<package pkgid="8956fa23da86a1892435559a4845c9319662d54684b880c44e06e691af48b795" name="openssl" arch="src">
  <version epoch="1" ver="1.0.2k" rel="25.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-16" date="1534248000">- fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
- fix incorrect error message on FIPS DSA parameter generation (#1603597)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
</package>
<package pkgid="d7f7ff5d72feb5de1c300e29cb01a4b7562aa3ef6d3e05e017af3fb8325d4507" name="openssl" arch="src">
  <version epoch="1" ver="1.0.2k" rel="26.el7_9"/>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-17" date="1549454400">- use SHA-256 in FIPS RSA pairwise key check
- fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
  timing side-channel key extraction</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-18" date="1554465600">- fix CVE-2018-0734 - DSA signature local timing side channel
- fix CVE-2019-1559 - 0-byte record padding oracle
- close the RSA decryption One &amp; done EM side channel (#1619558)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; 1.0.2k-19" date="1554811200">- close the RSA decryption 9 lives of Bleichenbacher cat
  timing side channel (#1649568)</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-20" date="1607083200">- fix CVE-2020-1971 openssl: EDIPARTYNAME NULL pointer de-reference</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-21" date="1607083201">- remove ASN1_F_ASN1_ITEM_EMBED_D2I from openssl-1.0.2k-cve-2020-1971.patch</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-22" date="1630497600">- fix CVE-2021-23841 openssl: NULL pointer dereference
  in X509_issuer_and_serial_hash()
- fix CVE-2021-23840 openssl: integer overflow in CipherUpdate
- Resolves: rhbz#1932132, rhbz#1932126</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-23" date="1637409600">- fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
- Resolves: rhbz#1996054</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; 1.0.2k-24" date="1642075200">- Updates patch openssl-1.0.2k-cve-2021-3712.patch to only free on push failure.
- Resolves: rhbz#2039993</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-25" date="1648036800">- Fixes CVE-2022-2078 Infinite loop in BN_mod_sqrt() reachable when parsing certificates
- Related: rhbz#2067160</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 1:1.0.2k-26" date="1678449600">- Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName
- Resolves: rhbz#2176790</changelog>
</package>
<package pkgid="4ab571d45842635142535ee9504abafc09ea8e996d5e26528f8d4ccf986ac725" name="oracleasm" arch="src">
  <version epoch="0" ver="2.0.8" rel="28.el7"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; 2.0.8-18" date="1492084800">- For &gt;= kernel-3.10.0-650.el7
- Resolves: #1441193</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; 2.0.8-19" date="1498478400">- For &gt;= kernel-3.10.0-685.el7
- Resolves: #1441193</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; 2.0.8-20" date="1510660800">- For &gt;= kernel-3.10.0-783.el7
- Resolves: #1498103</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; 2.0.8-21" date="1519300800">- For &gt;= kernel-3.10.0-855.el7
- Resolves: #1498103</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-22" date="1529409600">- For &gt;= kernel-3.10.0-907.el7
- Resolves: #1568406</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-24" date="1549368000">- Add "use-after-free-asm-request.patch"
- (oracleasm: Fix use after free for request processing timer)
- Resolves: #1672733</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-25" date="1552392000">- Add "oracleasm-claim-FMODE_EXCL-access-on-disk-during-asm.patch"
- Resolves: #1684223</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-26" date="1556539200">- Revert the addition
  of "oracleasm-claim-FMODE_EXCL-access-on-disk-during-asm.patch"
  as it introduces regressions ("ERROR: -15 ... asm_open error
  Operation not permitted").
- Rebuilt against kernel-3.10.0-1043.el7
- Resolves: #1700382</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-27" date="1566907200">- For &gt;= kernel-3.10.0-1082.el7
- Resolves: #1746010</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 2.0.8-28" date="1586865600">- For &gt;= kernel-3.10.0-1133.el7
- Resolves: #1816497</changelog>
</package>
<package pkgid="6d8f2fd58f11e603c428f8b2f417ca1e557b0ec41b082a15bee0c9d2f0f6d165" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.23" rel="1.el7_9.1"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-3" date="1554379200">- Support more than 64KB of fence agent output
- Avoid unnecessary recovery of group member
- Improve IPC clients' authentication of servers (CVE-2018-16877)
- Improve pacemakerd authentication of running subdaemons (CVE-2018-16878)
- Fix use-after-free with potential information disclosure (CVE-2019-3885)
- Resolves: rhbz#1549366
- Resolves: rhbz#1609453
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-4" date="1555675200">- Update security patches
- Resolves: rhbz#1694556
- Resolves: rhbz#1694559
- Resolves: rhbz#1694907</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.20-5" date="1558699200">- Correct memory issue in fence agent output fix
- Resolves: rhbz#1549366</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-1" date="1564488000">- Recover from quiesced DC disk
- Avoid timeouts and excessive stonithd CPU usage at start-up in large clusters
- Default serialized order constraints to symmetrical=false
- Avoid fence loops due to incorrect Pacemaker Remote ordering
- Default concurrent-fencing to true
- Harden GnuTLS priorities
- Rebase on upstream 1.1.21 final version
- Resolves: rhbz#1596125
- Resolves: rhbz#1625671
- Resolves: rhbz#1672225
- Resolves: rhbz#1704870
- Resolves: rhbz#1710422
- Resolves: rhbz#1727280
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-2" date="1566907200">- Add latest upstream bug fixes to rebase roll-up patch
- Resolves: rhbz#1731189</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-3" date="1573128000">- Avoid invalid transition when guest node's host is unclean but can't be fenced
- Resolves: rhbz#1755659</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.21-4" date="1579176000">- Implement shutdown-lock feature
- Resolves: rhbz#1781820</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.22-1" date="1585569600">- Show correct disabled resource count in status display
- Run-time option for Pacemaker Remote bind address
- Avoid restart loop when migration is left dangling
- Improve help for clean-up option
- Do not overweight group colocation scores
- Rebase on upstream 1.1.22+63d2d79
- Resolves: rhbz#1458953
- Resolves: rhbz#1743373
- Resolves: rhbz#1757951
- Resolves: rhbz#1758969
- Resolves: rhbz#1760669
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1" date="1590580800">- Improve help for clean-up option
- Avoid pending DC fencing getting "stuck" in status display
- Rebase on upstream 1.1.23-rc1
- Resolves: rhbz#1758969
- Resolves: rhbz#1787749
- Resolves: rhbz#1792492</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.23-1.1" date="1603972800">- Prevent ACL bypass (CVE-2020-25654)
- Resolves: rhbz#1892140</changelog>
</package>
<package pkgid="591384b1e73f3a5eb59493c50288fd50aebcf6a04e4e0f4416b49f02b8768ac0" name="patchutils" arch="src">
  <version epoch="0" ver="0.3.3" rel="5.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.1-4" date="1297166400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.2-1" date="1297339200">- 0.3.2.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-2" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-3" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.3.2-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.3-1" date="1364904000">- 0.3.3.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 0.3.3-2" date="1365681600">- Fixed help output (bug #948973).
- Fixed changelog dates.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.3.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.3.3-5" date="1608120000">- Resolves: #1905282, filterdiff not removing the header from excluded files in a git patch</changelog>
</package>
<package pkgid="9b1b0a3248dc947501282a68f5cdc1700575c674777bb3b763ff54d86d6c830d" name="pcp" arch="src">
  <version epoch="0" ver="4.3.2" rel="13.el7_9"/>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.1.0-5" date="1539086400">- Missing values from short /proc/*/status file reads (BZ 1600262)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-1" date="1556280000">- Numerous fixes in pmlogger daily scripts (BZs 1677848, 1697182, 1579881, 1603143)
- Update PCP selinux policy rules (BZs 1692305, 1695066)
- Adjust spec file /var/run/pcp settings (BZ 1533154)
- Fix pmdaproc kernel process misreporting (BZ 1673250)
- Fix pmdalinux SYSV IPC metric scalability (BZ 1699232)
- Ensure pmdaroot reaps all of its children (BZ 1698517)
- Corrections to python version dependencies (BZ 1676867)
- Fix pcp-atopsar(1) -A (all) option handling (BZ 1673996)
- Update to a more recent PCP bug fix release (BZ 1647308)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-2" date="1557144000">- Rework the pcp-libs ldconfig post-op (BZ 1705362)
- Resolve a QA file permissions diagnostic issue</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-4" date="1565352000">- Fix a pmdaproc memory leak (BZ 1721107)
- Rebuild with selinux runtime dependency update (BZ 1714101)
- Update selinux-policy to latest upstream (BZs 1699830, 1700989)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-5" date="1566475200">- Override tracefs_t presence in selinux-policy (BZ 1714856)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-6" date="1566993600">- Improve libpcp corrupt archive handling in multi-archive mode (BZ 1673053)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-7" date="1581940800">- Fix hugepage metrics in pmdalinux (BZ 1730107)
- Fix NUMA nodes instance domain in pmdalinux (BZ 1730492)
- Several selinux policy fixes (BZs 1749870, 1756252, 1760750)
- Fix pcp-atopsar sample count command line argument (BZ 1764748)
- Fix pcp-atop sigsegv with certain process state changes (BZ 1765641)
- Add pcp-zeroconf pmieconf rule to enable per-thread logging (BZ 1775373)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-8" date="1585742400">- Fix rpm %post privilege escalation CVEs (BZs 1815249, 1815528)
- Resolve an selinux policy issue with pmlogger (BZ 1792859)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-12" date="1591790400">- Fix pcp-atop dynamic memory initialization issues (BZ 1818710)</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 4.3.2-13" date="1604491200">- Fix pcp-atopsar memory allocation problem with some options (BZ 1857580)
- Fix __pmGetArchiveEnd_ctx sigsegv with corrupt PCP archives (BZ 1878754)</changelog>
</package>
<package pkgid="427fbd48e2ef6a3dee2f2fd7c62c12004ea28242729d92b140d71fda2a4c12f8" name="pcs" arch="src">
  <version epoch="0" ver="0.9.169" rel="3.el7_9.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-2" date="1556625600">- Updated logo and favicon in web UI
- Resolves: rhbz#1700542</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-1" date="1565006400">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-2" date="1571400000">- Do not generate custom DH key if it was not requested by setting its custom length
- Resolves: rhbz#1760434</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-3" date="1572955200">- More fixes for the case when PATH environment variable is not set
- Pcsd no longer sends Server HTTP header
- Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
- Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.168-4" date="1576670400">- Added command 'pcs resource relations'
- Added command 'pcs resource safe-disable'
- Resolves: rhbz#1770975 rhbz#1770973</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-1" date="1586433600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-2" date="1587384000">- Keep autogenerated IDs of set constraints reasonably short
- Use fixed version of python module subprocess (package python2-subprocess32)
- Resolves: rhbz#1820813 rhbz#1824206</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3" date="1592481600">- Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
- Fixed race-condition when removing multiple resources from web UI
- Resolves: rhbz#1833115 rhbz#1843593</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.1" date="1605268800">- Explicitly close libcurl connections to prevent stalled TCP connections in CLOSE-WAIT state
- Added support for loading DH keys from a file
- Resolves: rhbz#1870551 rhbz#1888479</changelog>
</package>
<package pkgid="7550f789ce76d94f1279991656f2eeadc763aff3beb0de50cf7aa324155435b2" name="pcs" arch="src">
  <version epoch="0" ver="0.9.169" rel="3.el7_9.3"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.167-3" date="1561723200">- Fixed crashes in the `pcs cluster auth` command
- Resolves: rhbz#1676956</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-1" date="1565006400">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1730747 rhbz#1725849 rhbz#1551663 rhbz#1595444 rhbz#1671174 rhbz#1712315 rhbz#1619253 rhbz#1710750 rhbz#1466088 rhbz#1558063 rhbz#1665898 rhbz#1500012 rhbz#1673829</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-2" date="1571400000">- Do not generate custom DH key if it was not requested by setting its custom length
- Resolves: rhbz#1760434</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.168-3" date="1572955200">- More fixes for the case when PATH environment variable is not set
- Pcsd no longer sends Server HTTP header
- Empty constraint option are not allowed in pcs constraint order and pcs constraint colocation add commands
- Resolves: rhbz#1500012 rhbz#1765606 rhbz#1671174</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.168-4" date="1576670400">- Added command 'pcs resource relations'
- Added command 'pcs resource safe-disable'
- Resolves: rhbz#1770975 rhbz#1770973</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-1" date="1586433600">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1822078 rhbz#1759269 rhbz#1448569</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-2" date="1587384000">- Keep autogenerated IDs of set constraints reasonably short
- Use fixed version of python module subprocess (package python2-subprocess32)
- Resolves: rhbz#1820813 rhbz#1824206</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3" date="1592481600">- Added option: pcs resource [safe-]disable --simulate` has a new option `--brief` to print only a list of affected resources
- Fixed race-condition when removing multiple resources from web UI
- Resolves: rhbz#1833115 rhbz#1843593</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.1" date="1605268800">- Explicitly close libcurl connections to prevent stalled TCP connections in CLOSE-WAIT state
- Added support for loading DH keys from a file
- Resolves: rhbz#1870551 rhbz#1888479</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.169-3.el7_3.2" date="1665057600">- Update rubygem rack
- Upgrade jquery in web-ui
- Resolves: rhbz#2099578 rhbz#2093232</changelog>
</package>
<package pkgid="2a70cd15be7e313558e0a580b37be8b73d30c4992500be438b096cfa042ac872" name="perl" arch="src">
  <version epoch="4" ver="5.16.3" rel="299.el7_9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-290" date="1471348800">- Removed deprecated files from provides (bug #1365991)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-291" date="1471435200">- Backported and sub-packaged libraries historically supplied with Perl 4
  into perl-Perl4-CoreLibs</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-292" date="1488196800">- Removed perl-Perl4-CoreLibs because it was added as separate package to
  RHEL (bug #1366724)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-293" date="1521633600">- Add SSL support to Net::SMTP (bug #1557574)
- Do not overload ".." in Math::BigInt (bug #1497734)
- Provide perl(:VERSION) and perl-interpreter RPM symbols (bug #1410347)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-294" date="1546862400">- Fix CVE-2018-18311 Integer overflow leading to buffer overflow (bug #1653527)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-295" date="1563969600">- Fix a spurious timeout in Net::FTP::close (bug #1626107)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-296" date="1579521600">- Fix day of year parsing (like "%y%j") (bug #1751381)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-297" date="1582545600">- Fix a file mode of a perl-example.stp example (bug #1806523)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4:5.16.3-298" date="1608292800">- Fix CVE-2020-12723 (bug #1839278)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.16.3-299" date="1610020800">- Fix CVE-2020-10543 (bug #1839272)
- Fix CVE-2020-10878 (bug #1839275)</changelog>
</package>
<package pkgid="b1395d2dc116b419dd29cc6184753ade0613b3c531385c2f6afb626fd0fbb270" name="perl-DBD-Pg" arch="src">
  <version epoch="0" ver="2.19.3" rel="5.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.18.0-4" date="1326456000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Marcela Ma&#x161;l&#xE1;&#x148;ov&#xE1; &lt;mmaslano@redhat.com&gt; 2.19.2-1" date="1331726400">- bump to 2.19.2</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.2-2" date="1339848000">- Perl 5.16 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.19.2-3" date="1342785600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.2-3.1" date="1345032000">- Rebuild for perl 5.16</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.3-1" date="1345636800">- 2.19.3 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.19.3-2" date="1345636801">- Specify all dependencies
- Move testme.tmp.pl to tests sub-package</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.19.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.19.3-5" date="1636027200">- Always clear out libpq results before reassigning (rhbz #2020111)</changelog>
</package>
<package pkgid="f1c3f44b6ae782057a55a8a32f3ba79184ff44359e0d3465d8005b7e64ae4121" name="pesign" arch="src">
  <version epoch="0" ver="0.109" rel="11.el7_9"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-3" date="1382702400">- Update to fix a bug coverity found.
  Related: rhbz1017857</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-4" date="1383048000">- Tweak the signing rules just a bit more.
  Related: rhbz1017857</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.109-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-6" date="1395316800">- Make sure CFLAGS is inherited properly for -fstack-protector-strong.
  Resolves: rhbz#1070782</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-7" date="1409140800">- Add aarch64.
  Resolves: rhbz#1100042</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-8" date="1409140801">- Include aarch64 in the rpm macro
  Related: rhbz#1100042</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-9" date="1409659200">- Build as PIE+RELRO binaries.
  Resolves: rhbz#1092542</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 0.109-9" date="1409659201">- Fix man page errors.
  Resolves: rhbz#948850</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - - 0.109-10" date="1463400000">- Add support for /etc/pesign/users and /etc/pesign/groups
  Resolves: rhbz#1141263</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.109-11" date="1674043200">- Backport newer, deprecated pesign-authorize
- Resolves: CVE-2022-3560</changelog>
</package>
<package pkgid="576325412f7ab0fd9d47cf3c7de948e9f46a8a0e4f677d97a894885d4256e85c" name="php-pear" arch="src">
  <version epoch="1" ver="1.9.4" rel="23.el7_9"/>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; 1:1.9.4-14" date="1355227200">- add explicit requires on all needed extensions (phpci)
- fix pecl launcher (need ini to be parsed for some
  extenstions going to be build as shared, mainly simplexml)
- add fix for new unpack format (php 5.5)</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; 1:1.9.4-15" date="1360411200">- update Archive_Tar to 1.3.11
- drop php 5.5 patch merged upstream</changelog>
  <changelog author="Ralf Cors&#xE9;pius &lt;corsepiu@fedoraproject.org&gt; - 1:1.9.4-16" date="1363089600">- Remove %config from %{_sysconfdir}/rpm/macros.*
  (https://fedorahosted.org/fpc/ticket/259).</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-17" date="1366891200">- improve post scriptlet to avoid updating pear.conf
  when not needed</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-18" date="1367582400">- don't verify metadata file content</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-19" date="1371556800">- add man pages for pear, peardev and pecl commands</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-20" date="1373457600">- add man page for pear.conf file</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.9.4-21" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-22" date="1586952000">- fix fatal error: gnu/stubs-64.h: No such file or directory #1720375</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; 1:1.9.4-23" date="1663848000">- update Archive_Tar to 1.4.14
  CVE-2020-36193 CVE-2020-28948 CVE-2020-28949</changelog>
</package>
<package pkgid="05e363748e2d736447306d7a74c21784feb68fafc99d1852e65198653b3239ed" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="12.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-3" date="1587297600">- Updated jss dependencies
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-4" date="1588680000">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE
  additional support and touch-up (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
</package>
<package pkgid="40dd502d4de58a992c01ade219360297174de1557e1e90359c84387b83205333" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="14.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-5" date="1588852800">- Updated jss dependencies
- Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
</package>
<package pkgid="f26de53d916a2c0dd1d4a82defc17cbfa51ce17bfecdb30a3eab926c81793a17" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="15.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-6" date="1589889600">- Patch for CMC Credential Error, RSA PSS typo, and new profile
  for directory-authentication-based Server-Side keygen
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1710109 - add RSA PSS support (jmagne)
- Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="661532d882632a1e6f1e7c98aea1fea0fce816cdd3013576fa265e8d5e52f926" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="16.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-7" date="1590580800">- Patch for CMCResponse tool
- Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
</package>
<package pkgid="f4cbcabfdfa56c68c9e2ec4ccc3662f01d365511daacb9e4ba28967aa1eced4a" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="17.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-8" date="1605614400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if
  - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client
  - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working
  - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="e241303992136f7dc333c29d38d538d3c3bbf0079e60f2ae548b01674064d461" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="18.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-9" date="1606996800">- Bugzilla Bug #1883639 - additional support on upgrade for audit
  cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="1b83c6b40f35e9f660e8d5e2c2d40cc1c342c46d8236a372ef4704ebf8cd9c0f" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="19.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-10" date="1607083200">- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-11" date="1613044800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="7747aa051ec1b3f724b122a6aaf3dbb21c22508632a48857f3064f35d22e580c" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="21.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-12" date="1614168000">- Change variable 'TPS' to 'tps'
- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates
  profiles, audit for IPA (edewata)
- ##########################################################################
- # Backported CVEs (ascheel):
- ##########################################################################
- Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token
  parameters in TPS resulting in stored XSS [certificate_system_9-default]
  (edewata, ascheel)
- Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site
  scripting (XSS) in the pki-tps web Activity tab
  [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile
  creation [certificate_system_9-default] (edewata, ascheel)
- Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site
  Scripting in 'path length' constraint field in CA's Agent page
  [rhel-7.9.z] (dmoluguw, ascheel)
- Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site
  scripting in getcookies?url= endpoint in CA [rhel-7.9.z]
  (dmoluguw, ascheel)
- Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra:
  Reflected XSS in recoveryID search field at KRA's DRM agent page in
  authorize recovery tab [rhel-7.9.z] (ascheel)
- Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to
  reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne)
- ##########################################################################
- Update to jquery v3.4.1 (ascheel)
- Update to jquery-i18n-properties v1.2.7 (ascheel)
- Update to backbone v1.4.0 (ascheel)
- Upgrade to underscore v1.9.2 (ascheel)
- Update to patternfly v3.59.3 (ascheel)
- Update to jQuery v3.5.1 (ascheel)
- Upgrade to bootstrap v3.4.1 (ascheel)
- Link in new Bootstrap CSS file (ascheel)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-13" date="1619092800">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base
  build (jmagne)
- Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot
  be processed (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="2cff94aaca00dbcf1b204e55732718d89947fbfc8eb1e66f675252cab666ddf2" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="23.el7_9"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.18-14" date="1620907200">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1911472 - Revoke via REST API not working when Agent
  certificate not issued by CA [rhel-7.9.z] (cfu)
- Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version
  String.java.io.FileNotFoundException (ckelley)
- Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching
  PIN_RESET=YES to NO [rhel-7.9.z] (jmagne)
- Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA
  fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
</package>
<package pkgid="d5ce0fed57ee5c8190cc5ff446c165c0b1844d4b341abacfc0f16280e5fd865c" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="24.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-15" date="1624622400">- ##########################################################################
- # RHEL 7.9:
- ##########################################################################
- Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission
  per LDAP group without immediate issuance [rhel-7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
</package>
<package pkgid="cb593303d90944d4b0199c03be2ee9a7171f1758169864aa572ba80b8a005b56" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="25.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-16" date="1628510400">- ##########################################################################
- # RHEL 7.9 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu]
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500:
  Non-2xx response from CA REST API: 500 [ftweedale, ckelley]
- ##########################################################################
- # RHCS 9.7 (Batch Update 8):
- ##########################################################################
- Bugzilla Bug 1959937 - TPS Allowing Token Transactions while
  the CA is Down [cfu]
- Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile
  Separation [cfu]</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-17" date="1631707200">- ##########################################################################
- # RHEL 7.9 (Batch Update 9):
- ##########################################################################
- Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx
  response from CA REST API: 500 [ftweedal, ckelley]
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
</package>
<package pkgid="06b05ec76de0e877fc64588842e480fc3399edc0946536374f497f9aa2ae9b29" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="27.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-18" date="1634990400">- ##########################################################################
- # RHEL 7.9 (Batch Update 10):
- ##########################################################################
- Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward
  Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen)
- Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could
  have been worked around after installation [RHEL 7.9.z] (cfu)
- Bugzilla Bug 2016773 - Directory authentication plugin requires directory
  admin password just for user authentication (rhel-7.9.z)
  (awnuk@purestorage.com, jmagne)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-19" date="1639656000">- ##########################################################################
- # RHEL 7.9 (Batch Update 11):
- ##########################################################################
- Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu)
- Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail
  in FIPS Mode (cfu)
- Bugzilla Bug 2018608 - Invalid certificates with creation of subCA
  (pkispawn single step) [rhel-7.9.0.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-20" date="1650888000">- ##########################################################################
- # RHEL 7.9 (Batch Update 14):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-21" date="1653998400">- ##########################################################################
- # RHEL 7.9 (Batch Update 15):
- ##########################################################################
- Bugzilla Bug #2074722 - user password and pkcs12 password exposure when
  debug level set to maximum [RHEL 7.9.z] (cfu)
- Bugzilla Bug #2082717 - SCEP manual approval failure (cfu)
- ##########################################################################
- # RHCS 9.7:
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-22" date="1661169600">- ##########################################################################
- # RHEL 7.9 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 17):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
</package>
<package pkgid="ff01b08b9ddf650e09e14588df401f59bc8aea6db28a469416abb3ab15473d33" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.18" rel="32.el7_9"/>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-23" date="1665403200">- ##########################################################################
- # RHEL 7.9 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 18):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)
- Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the
  caServerKeygen_DirUserCert profile, user can get certificates for other
  UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-24" date="1666785600">- ##########################################################################
- # RHEL 7.9 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen)
- ##########################################################################
- # RHCS 9.7 (Batch Update 19):
- ##########################################################################
- Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external
  entities when parsing XML can lead to XXE [certificate_system_9.7.z]
  (ckelley, mharmsen)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-25" date="1676030400">- ##########################################################################
- # RHEL 7.9 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #2160355 - RA Separation by KeyType - Set Token Status
  [RHCS 9.7 bu 21] (cfu, ckelley)
- ##########################################################################
- # RHCS 9.7 (Batch Update 21):
- ##########################################################################
- Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and
  pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-26" date="1679659200">- ##########################################################################
- # RHEL 7.9 (Batch Update 22):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 22):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-27" date="1682942400">- ##########################################################################
- # RHEL 7.9 (Batch Update 23):
- ##########################################################################
- ##########################################################################
- # RHCS 9.7 (Batch Update 23):
- ##########################################################################
- Bugzilla Bug #2179305 - Unable to use the TPS UI "Token Filter" to filter
  a list of tokens [RHCS 9.7] (ckelley)
- Bugzilla Bug #2092522 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False [RHCS 9.7.z] (cfu)
- Bugzilla Bug #2176233 - TPS Not allowing Token Status Change based on
  Revoke True/False and Hold till last True/False (part 2) [RHCS 9.7.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-28" date="1713441600">- ##########################################################################
- # RHEL 7.9 (Async Security Update CY24Q2):
- ##########################################################################
- Updated nspr-devel and nss-devel build requirements as well as nss and
  nss-tools runtime requirements (mharmsen)
- Updated jss dependencies (mharmsen)
- Added git build dependency (mharmsen)
- RHEL-9917 - EMBARGOED CVE-2023-4727 pki-core: dogtag ca:
  token authentication bypass vulnerability [rhel-7.9.z] (jmagne)
- RHEL-24339 - pki-core - PrettyPrintCert does not properly
  translate AIA information into a readable format [RHEL 7.9.z] (mfargett)
- RHEL-26881 - Fix additional OID mappings [RHEL 7.9.z] (mfargett)
- ##########################################################################
- # RHCS 9.7 (Async Security Update CY24Q2):
- ##########################################################################
- Bug 2047831 - Coolkey Hardcoded RSA Max Key Size
  [RHCS 9.7.z] (jmagne)
- Bug 2121463 - Add Secure Channel Support for AES-256 Keys
  [RHCS 9.7.z] (jmagne)
- Bug 2177785 - TPS missing Host header field in HTTP/1.1 request
  message [RHCS 9.7.z] (mfargett)
- Bug 2180920 - add AES support for TMS server-side keygen on latest
  HSM / FIPS environment [RHCS 9.7.z] (jmagne)
- Bug 2233158 - Make key wrapping algorithm configurable
  between AES-KWP and AES-CBC [RHCS 9.7.z] (jmagne)
- Bug 2253682 - pkidestroy log keeps HSM token password
  [RHCS 9.7.z] (mfargett)
- Bug 2265180 - Add Support for Symmetric Key Rollover
  [RHCS 9.7.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-29" date="1715947200">- ##########################################################################
- # RHEL 7.9 (Async Security Update CY24Q2.1):
- ##########################################################################
- Updated nspr-devel and nss-devel build requirements as well as nss and
  nss-tools runtime requirements (mharmsen)
- Updated jss dependencies (mharmsen)
- Added git build dependency (mharmsen)
- Additional trivial fix (jmagne)
- RHEL-9917 - EMBARGOED CVE-2023-4727 pki-core: dogtag ca:
  token authentication bypass vulnerability [rhel-7.9.z] (jmagne)
- RHEL-24339 - pki-core - PrettyPrintCert does not properly
  translate AIA information into a readable format [RHEL 7.9.z] (mfargett)
- RHEL-26881 - Fix additional OID mappings [RHEL 7.9.z] (mfargett)
- ##########################################################################
- # RHCS 9.7 (Async Security Update CY24Q2.1):
- ##########################################################################
- Bug 2047831 - Coolkey Hardcoded RSA Max Key Size
  [RHCS 9.7.z] (jmagne)
- Bug 2121463 - Add Secure Channel Support for AES-256 Keys
  [RHCS 9.7.z] (jmagne)
- Bug 2177785 - TPS missing Host header field in HTTP/1.1 request
  message [RHCS 9.7.z] (mfargett)
- Bug 2180920 - add AES support for TMS server-side keygen on latest
  HSM / FIPS environment [RHCS 9.7.z] (jmagne)
- Bug 2233158 - Make key wrapping algorithm configurable
  between AES-KWP and AES-CBC [RHCS 9.7.z] (jmagne)
- Bug 2253682 - pkidestroy log keeps HSM token password
  [RHCS 9.7.z] (mfargett, jmagne)
- Bug 2265180 - Add Support for Symmetric Key Rollover
  [RHCS 9.7.z] (jmagne)
- Bug 2280722 - Shared token is not generated for TPS and TKS
  during install despite adding pki_import_shared_secret=True param
  at install [RHCS 9.7.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-30" date="1716465600">- ##########################################################################
- # RHEL 7.9 (Async Security Update CY24Q2.2):
- ##########################################################################
- Updated nspr-devel and nss-devel build requirements as well as nss and
  nss-tools runtime requirements (mharmsen)
- Updated jss dependencies (mharmsen)
- Added git build dependency (mharmsen)
- Additional trivial fix (jmagne)
- RHEL-9917 - EMBARGOED CVE-2023-4727 pki-core: dogtag ca:
  token authentication bypass vulnerability [rhel-7.9.z] (jmagne)
- RHEL-24339 - pki-core - PrettyPrintCert does not properly
  translate AIA information into a readable format [RHEL 7.9.z] (mfargett)
- RHEL-26881 - Fix additional OID mappings [RHEL 7.9.z] (mfargett)
- ##########################################################################
- # RHCS 9.7 (Async Security Update CY24Q2.2):
- ##########################################################################
- Bug 2047831 - Coolkey Hardcoded RSA Max Key Size
  [RHCS 9.7.z] (jmagne)
- Bug 2121463 - Add Secure Channel Support for AES-256 Keys
  [RHCS 9.7.z] (jmagne)
- Bug 2177785 - TPS missing Host header field in HTTP/1.1 request
  message [RHCS 9.7.z] (mfargett)
- Bug 2180920 - add AES support for TMS server-side keygen on latest
  HSM / FIPS environment [RHCS 9.7.z] (jmagne)
- Bug 2233158 - Make key wrapping algorithm configurable
  between AES-KWP and AES-CBC [RHCS 9.7.z] (jmagne)
- Bug 2253682 - pkidestroy log keeps HSM token password
  [RHCS 9.7.z] (mfargett, jmagne)
- Bug 2265180 - Add Support for Symmetric Key Rollover
  [RHCS 9.7.z] (jmagne)
- Bug 2280722 - Shared token is not generated for TPS and TKS
  during install despite adding pki_import_shared_secret=True param
  at install [RHCS 9.7.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-31" date="1717156800">- ##########################################################################
- # RHEL 7.9 (Async Security Update CY24Q2.3):
- ##########################################################################
- Updated nspr-devel and nss-devel build requirements as well as nss and
  nss-tools runtime requirements (mharmsen)
- Updated jss dependencies (mharmsen)
- Added git build dependency (mharmsen)
- Additional trivial fix (jmagne)
- RHEL-9917 - EMBARGOED CVE-2023-4727 pki-core: dogtag ca:
  token authentication bypass vulnerability [rhel-7.9.z] (jmagne)
- RHEL-24339 - pki-core - PrettyPrintCert does not properly
  translate AIA information into a readable format [RHEL 7.9.z] (mfargett)
- RHEL-26881 - Fix additional OID mappings [RHEL 7.9.z] (mfargett)
- ##########################################################################
- # RHCS 9.7 (Async Security Update CY24Q2.3):
- ##########################################################################
- Bug 2047831 - Coolkey Hardcoded RSA Max Key Size
  [RHCS 9.7.z] (jmagne)
- Bug 2121463 - Add Secure Channel Support for AES-256 Keys
  [RHCS 9.7.z] (jmagne)
- Bug 2177785 - TPS missing Host header field in HTTP/1.1 request
  message [RHCS 9.7.z] (mfargett)
- Bug 2180920 - add AES support for TMS server-side keygen on latest
  HSM / FIPS environment [RHCS 9.7.z] (jmagne)
- Bug 2233158 - Make key wrapping algorithm configurable
  between AES-KWP and AES-CBC [RHCS 9.7.z] (jmagne)
- Bug 2253682 - pkidestroy log keeps HSM token password
  [RHCS 9.7.z] (mfargett, jmagne)
- Bug 2265180 - Add Support for Symmetric Key Rollover
  [RHCS 9.7.z] (jmagne)
- Bug 2280722 - Shared token is not generated for TPS and TKS
  during install despite adding pki_import_shared_secret=True param
  at install [RHCS 9.7.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;devel@lists.dogtagpki.org&gt; 10.5.18-32" date="1717416000">- ##########################################################################
- # RHEL 7.9 (Async Security Update CY24Q2.4):
- ##########################################################################
- Updated nspr-devel and nss-devel build requirements as well as nss and
  nss-tools runtime requirements (mharmsen)
- Updated jss dependencies (mharmsen)
- Added git build dependency (mharmsen)
- Additional trivial fix (jmagne)
- RHEL-9917 - EMBARGOED CVE-2023-4727 pki-core: dogtag ca:
  token authentication bypass vulnerability [rhel-7.9.z] (jmagne)
- RHEL-24339 - pki-core - PrettyPrintCert does not properly
  translate AIA information into a readable format [RHEL 7.9.z] (mfargett)
- RHEL-26881 - Fix additional OID mappings [RHEL 7.9.z] (mfargett)
- ##########################################################################
- # RHCS 9.7 (Async Security Update CY24Q2.4):
- ##########################################################################
- Bug 2047831 - Coolkey Hardcoded RSA Max Key Size
  [RHCS 9.7.z] (jmagne)
- Bug 2121463 - Add Secure Channel Support for AES-256 Keys
  [RHCS 9.7.z] (jmagne)
- Bug 2177785 - TPS missing Host header field in HTTP/1.1 request
  message [RHCS 9.7.z] (mfargett)
- Bug 2180920 - add AES support for TMS server-side keygen on latest
  HSM / FIPS environment [RHCS 9.7.z] (jmagne)
- Bug 2233158 - Make key wrapping algorithm configurable
  between AES-KWP and AES-CBC [RHCS 9.7.z] (jmagne)
- Bug 2253682 - pkidestroy log keeps HSM token password
  [RHCS 9.7.z] (mfargett, jmagne)
- Bug 2265180 - Add Support for Symmetric Key Rollover
  [RHCS 9.7.z] (jmagne)
- Bug 2280722 - Shared token is not generated for TPS and TKS
  during install despite adding pki_import_shared_secret=True param
  at install [RHCS 9.7.z] (jmagne)</changelog>
</package>
<package pkgid="91b1ae87bcb8a2335fa39511ad9be5c7561a1e581496bb48ab227fe604486a9f" name="plexus-archiver" arch="src">
  <version epoch="0" ver="2.4.2" rel="6.el7_9"/>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 0:2.2-4" date="1353672000">- Add ASL 2.0 license text to packages</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:2.2-5" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:2.2-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.3-1" date="1365681600">- Update to upstream version 2.3
- Use apache-commons-compress for bzip2 (de)compression
- Resolves: CVE-2012-2098</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-1" date="1369396800">- Update to upstream version 2.4.2
- Remove patch for CVE-2012-2098 (accepted upstream)</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 0:2.4.2-2" date="1371124800">- Update to latest packaging guidelines
- Remove MIT license (only applies to test cases not binary rpm)</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-3" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 02.4.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-5" date="1527854400">- Fix arbitrary file write vulnerability
- Resolves: CVE-2018-1002200</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 0:2.4.2-6" date="1697198400">- Avoid override target symlink by standard file in AbstractUnArchiver
- Fixes: CVE-2023-37460</changelog>
</package>
<package pkgid="5eec0cbde500df3a4c58fe19f43795e152341a034467ac1ed733beff69799225" name="podman" arch="src">
  <version epoch="0" ver="1.6.4" rel="26.el7_9"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-17" date="1585656000">- fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"
- Resolves: #1817743</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-18" date="1585915200">- fix "CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull"
- Resolves: #1806940</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-19" date="1596024000">- fix "podman segfault upon doing buildah operations due to error handling message"
- Resolves: #1853326</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-20" date="1596110400">- rebuilt</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-21" date="1597665600">- fix "podman launches a container with systemd instance inside - bind mounts of systemd cgroup entries are being leaked in host mount namespace"
- Resolves: #1860506</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-22" date="1598788800">- revert regressions introduced by 0001-bump-github.com-containers-buildah-to-v1.11.5.patch
  regressed bugzilla list follows:
- Related: #1817743, #1792243, #1784950</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-23" date="1599825600">- fix "CVE-2020-14040 podman: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-7]"
- Resolves: #1854715</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-24" date="1599825601">- fix "podman does not use $TMPDIR loading a tar file."
- Resolves: #1877699</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-25" date="1600257600">- use proper patch to address "podman does not use $TMPDIR loading a tar file."
- Resolves: #1877699</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-26" date="1600776000">- fix "CVE-2020-14370 podman: environment variables leak between containers when started via Varlink or Docker-compatible REST API [rhel-7]"
- Resolves: #1881062</changelog>
</package>
<package pkgid="0dfacc5d67ef4df0c8194f0f8a3ad0977f1776bf01816da5f9f8806f77606324" name="podman" arch="src">
  <version epoch="0" ver="1.6.4" rel="27.el7_9"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-18" date="1585915200">- fix "CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull"
- Resolves: #1806940</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-19" date="1596024000">- fix "podman segfault upon doing buildah operations due to error handling message"
- Resolves: #1853326</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-20" date="1596110400">- rebuilt</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-21" date="1597665600">- fix "podman launches a container with systemd instance inside - bind mounts of systemd cgroup entries are being leaked in host mount namespace"
- Resolves: #1860506</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-22" date="1598788800">- revert regressions introduced by 0001-bump-github.com-containers-buildah-to-v1.11.5.patch
  regressed bugzilla list follows:
- Related: #1817743, #1792243, #1784950</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-23" date="1599825600">- fix "CVE-2020-14040 podman: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-7]"
- Resolves: #1854715</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-24" date="1599825601">- fix "podman does not use $TMPDIR loading a tar file."
- Resolves: #1877699</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-25" date="1600257600">- use proper patch to address "podman does not use $TMPDIR loading a tar file."
- Resolves: #1877699</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-26" date="1600776000">- fix "CVE-2020-14370 podman: environment variables leak between containers when started via Varlink or Docker-compatible REST API [rhel-7]"
- Resolves: #1881062</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-27" date="1607601600">- fix podman-buildah mounting issue
- Resolves: #1895027</changelog>
</package>
<package pkgid="bf1deb38e64a5246812ff50eb4dd321e9b7fa5ae54890967439f7bb4eb899e84" name="podman" arch="src">
  <version epoch="0" ver="1.6.4" rel="29.el7_9"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-20" date="1596110400">- rebuilt</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-21" date="1597665600">- fix "podman launches a container with systemd instance inside - bind mounts of systemd cgroup entries are being leaked in host mount namespace"
- Resolves: #1860506</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-22" date="1598788800">- revert regressions introduced by 0001-bump-github.com-containers-buildah-to-v1.11.5.patch
  regressed bugzilla list follows:
- Related: #1817743, #1792243, #1784950</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-23" date="1599825600">- fix "CVE-2020-14040 podman: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-7]"
- Resolves: #1854715</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-24" date="1599825601">- fix "podman does not use $TMPDIR loading a tar file."
- Resolves: #1877699</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-25" date="1600257600">- use proper patch to address "podman does not use $TMPDIR loading a tar file."
- Resolves: #1877699</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-26" date="1600776000">- fix "CVE-2020-14370 podman: environment variables leak between containers when started via Varlink or Docker-compatible REST API [rhel-7]"
- Resolves: #1881062</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-27" date="1607601600">- fix podman-buildah mounting issue
- Resolves: #1895027</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-28" date="1613390400">- fix "CVE-2021-20188 podman: container users permissions are not respected in privileged containers [rhel-7.9.z]"
- Resolves: #1918282</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-29" date="1613995200">- fix "podman can not create user inside of container"
- Related: #1930552</changelog>
</package>
<package pkgid="44ed6a79dc916a47352c1c03bc85427aa4cf320f0b95f49775cf51e3ed5bdb44" name="podman" arch="src">
  <version epoch="0" ver="1.6.4" rel="32.el7_9"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-23" date="1599825600">- fix "CVE-2020-14040 podman: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-7]"
- Resolves: #1854715</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-24" date="1599825601">- fix "podman does not use $TMPDIR loading a tar file."
- Resolves: #1877699</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-25" date="1600257600">- use proper patch to address "podman does not use $TMPDIR loading a tar file."
- Resolves: #1877699</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-26" date="1600776000">- fix "CVE-2020-14370 podman: environment variables leak between containers when started via Varlink or Docker-compatible REST API [rhel-7]"
- Resolves: #1881062</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-27" date="1607601600">- fix podman-buildah mounting issue
- Resolves: #1895027</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-28" date="1613390400">- fix "CVE-2021-20188 podman: container users permissions are not respected in privileged containers [rhel-7.9.z]"
- Resolves: #1918282</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-29" date="1613995200">- fix "podman can not create user inside of container"
- Related: #1930552</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-30" date="1650974400">- update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
  (https://github.com/containers/podman/commit/c19e460)
- Related: #2074089</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-31" date="1650974401">- drop libseccomp dependency
- Related: #2074089</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-32" date="1651060800">- update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
  (https://github.com/containers/podman/commit/aba15dd)</changelog>
</package>
<package pkgid="332cd7606d057918d6a3c57b4b35a236b8142dbccbf0a6af3d29675352be71b5" name="podman" arch="src">
  <version epoch="0" ver="1.6.4" rel="36.el7_9"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-27" date="1607601600">- fix podman-buildah mounting issue
- Resolves: #1895027</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-28" date="1613390400">- fix "CVE-2021-20188 podman: container users permissions are not respected in privileged containers [rhel-7.9.z]"
- Resolves: #1918282</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-29" date="1613995200">- fix "podman can not create user inside of container"
- Related: #1930552</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-30" date="1650974400">- update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
  (https://github.com/containers/podman/commit/c19e460)
- Related: #2074089</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-31" date="1650974401">- drop libseccomp dependency
- Related: #2074089</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-32" date="1651060800">- update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
  (https://github.com/containers/podman/commit/aba15dd)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-33" date="1655121600">- update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
  (https://github.com/containers/podman/commit/68af661)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-34" date="1656504000">- fix RHEL7 regressions - thanks to Valentin Rothberg</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-35" date="1656504001">- update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
  (https://github.com/containers/podman/commit/e330751)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.6.4-36" date="1660651200">- update to the latest content of https://github.com/containers/podman/tree/v1.6.4-rhel
  (https://github.com/containers/podman/commit/7667df8)</changelog>
</package>
<package pkgid="1cc9a232fb56162ae5372e920d62ec965c1c5342dae1ce50ec7584bf3a08eb28" name="polkit" arch="src">
  <version epoch="0" ver="0.112" rel="26.el7_9.1"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-18" date="1533124800">- Error message about getting authority is too elaborate
- Resolves: rhbz#1342855</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-19" date="1544097600">- Fix of CVE-2018-19788, priv escalation with high UIDs
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-20" date="1548072000">- Fix of CVE-2019-6133, PID reuse via slow fork
- Resolves: rhbz#1667312</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-21" date="1549454400">- Mitigation of regression caused by fix of CVE-2018-19788
- Resolves: rhbz#1656377</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-22" date="1553169600">- pkttyagent: polkit-agent-helper-1 timeout leaves tty echo disabled
- Resolves: rhbz#1325512</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-23" date="1562846400">- pkttyagent: process stopped by SIGTTOU if run in background job
- Resolves: rhbz#1724444</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-24" date="1569585600">- pkttyagent: resetting terminal erases rest of input line
- Resolves: rhbz#1753037</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-25" date="1571659200">- fix of CVE-2018-1116
- Resolves: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26" date="1571832000">- Refined upstream fix of CVE-2018-1116 to avoid ABI changes
- Related: rhbz#1601411</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 0.112-26.1" date="1639742400">- pkexec: argv overflow results in local privilege esc.
- Resolves: CVE-2021-4034</changelog>
</package>
<package pkgid="50f2e4c7a820d1607919ad0870b9304be782212c2e711b8056027a6b4986bc17" name="poppler" arch="src">
  <version epoch="0" ver="0.26.5" rel="43.el7.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-35" date="1552910400">- Export PrintScaling viewer preference in glib frontend
- Related: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-36" date="1552910401">- Fix version from which PrintScaling is available
- Resolves: #1658304</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-37" date="1553083200">- Fix tiling patterns when pattern cell is too far
- Resolves: #1378961</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-38" date="1553860800">- Constrain number of cycles in rescale filter
- Compute correct coverage values for box filter
- Resolves: #1688417</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-39" date="1565697600">- Check whether input is RGB in PSOutputDev::checkPageSlice()
- Resolves: #1697575</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-40" date="1565697601">- Fail gracefully if not all components of JPEG2000Stream
- have the same size
- Resolves: #1723504</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-41" date="1565697602">- Ignore dict Length if it is broken
- Resolves: #1733026</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-42" date="1573819200">- Fix potential integer overflow and check length for negative values
- Resolves: #1757283</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43" date="1586952000">- Fix crash on broken file in tilingPatternFill()
- Resolves: #1801340</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 0.26.5-43.el7_9.1" date="1599825600">- Handle bytestring representation of named dests
- Resolves: #1857678</changelog>
</package>
<package pkgid="155b5b9190f353c9c115d213b31279b3c4574df0b3bb771eff532495340a0ec6" name="postgresql" arch="src">
  <version epoch="0" ver="9.2.24" rel="6.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.21-1" date="1494504000">- update to 9.2.21 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-21.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-20.html
  http://www.postgresql.org/docs/9.2/static/release-9-2-19.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
</package>
<package pkgid="1b008d8f124a6400cd24bade112f9c15bc82d4e2e50f7104f1e670ef222206c2" name="postgresql" arch="src">
  <version epoch="0" ver="9.2.24" rel="7.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.22-1" date="1503576000">- update to 9.2.22 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-22.html</changelog>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
</package>
<package pkgid="83685390cb7029cc2224e055fc1c66d0c17e8d5397d7a89b688497f3e7e54656" name="postgresql" arch="src">
  <version epoch="0" ver="9.2.24" rel="8.el7_9"/>
  <changelog author="Petr Kubat &lt;pkubat@redhat.com&gt; - 9.2.23-1" date="1504008000">- update to 9.2.23 per release notes
  http://www.postgresql.org/docs/9.2/static/release-9-2-23.html</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
</package>
<package pkgid="edce19818d9ffa6ca2d452fc887b2c2815c460c3f2bed08ba75971d9a6ad20c8" name="postgresql" arch="src">
  <version epoch="0" ver="9.2.24" rel="9.el7_9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-2" date="1508760000">- fix CVE-2017-12172</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.23-3" date="1509969600">- setup: keep PGSETUP_* variables after switching to not-privileged user</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.24-1" date="1534248000">- update to the latest 9.2 release
- fix CVE-2018-10915</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; 9.2.24-2" date="1572955200">- Check if callback is already set
  Resolves: #1755154</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-4" date="1579867200">- Patch fixing BZ#1754816: handle EAGAIN error on socket write</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-5" date="1610020800">- Patch fixing CVE-2020-25694 BZ#1907894
- Patch fixing CVE-2020-25695 BZ#1907895</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 9.2.24-6" date="1618401600">- Patch fixing BZ#1741488 CVE-2019-10208</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-7" date="1625227200">- Fix CVE-2021-32027
- Resolves: #1964507</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 9.2.24-8" date="1654084800">- Resolves: CVE-2022-1552
- Backport upstrem fix: a117cebd638dd02e5c2e791c25e43745f233111b</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 9.2.24-9" date="1700136000">- Backport fix for CVE-2023-5869</changelog>
</package>
<package pkgid="f90a7bdc4fe9a4e22c296a9dab39115788b2a09f27a89a8db685222db387bae6" name="pulseaudio" arch="src">
  <version epoch="0" ver="10.0" rel="6.el7_9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-5" date="1431086400">- Add more Requires to avoid testing multiple versions for qpaeq
- Resolves: #1174548</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-6" date="1431086401">- build against bluez5
- disable ofono backend
- Resolves: #1174548</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 6.0-7" date="1434974400">- better autostart.patch, handle case were autospawn is disabled
  (or otherwise doesn't work, like for root user)
- Resolves: #1269104</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 6.0-8" date="1467028800">- update translations
- Resolves: #1272897</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 10.0-1" date="1484827200">- Update to 10.0
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-2" date="1486641600">- enable webrtc
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-3" date="1489060800">- Add more Requires to avoid testing multiple versions
- Resolves: #1387036</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-4" date="1502280000">- Add support for usb audio in the Dell dock TB16
- Add patches to improve default sinks
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-5" date="1516104000">- Dist the new config file for Dell dock TB16
- Resolves: #1457385</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 10.0-6" date="1598011200">- Allow root owned home directory.
- Resolves: #1856308</changelog>
</package>
<package pkgid="c00df15aba190af61f19c9b071c767259c0566b661214ae4880b49aa8a61fbb3" name="python" arch="src">
  <version epoch="0" ver="2.7.5" rel="90.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-81" date="1553601600">- Security fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-82" date="1556884800">- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
</package>
<package pkgid="ac660d23878ef1fecc0011a65b71b0767a1b108e7e4b225194615e503a4f1075" name="python" arch="src">
  <version epoch="0" ver="2.7.5" rel="92.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-83" date="1557403200">- Remove unversioned obsoletes
Resolves: rhbz#1703600</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
</package>
<package pkgid="805f28954fd98fdbce93b17d976ea7f23ffefd3837072d013088368a98ac2567" name="python" arch="src">
  <version epoch="0" ver="2.7.5" rel="93.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-84" date="1557921600">- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="1409f313fa90543f886c391d0ea17d8a997882a61b5e2d4f8257ecb1fad70a9d" name="python" arch="src">
  <version epoch="0" ver="2.7.5" rel="94.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-85" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1704174</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-86" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718388</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-87" date="1566907200">- Fix CVE-2018-20852
Resolves: rhbz#1741551</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-88" date="1569412800">- Security fix for CVE-2019-16056
Resolves: rhbz#1750773</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-89" date="1584705600">- Security fix for CVE-2019-16935
Resolves: rhbz#1797998</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-90" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-91" date="1652788800">- Security fixes for CVE-2020-26116, CVE-2020-26137 and CVE-2022-0391
- Test fixes for the latest expat security release
- Update the certificates utilized in the test suite
Resolves: rhbz#1883014, rhbz#1883632, rhbz#2047376, rhbz#1896494</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-92" date="1653393600">- Security fix for CVE-2021-3177
Resolves: rhbz#1918168</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.7.5-93" date="1685016000">- Fix for CVE-2023-24329
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-94" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-9615</changelog>
</package>
<package pkgid="bfbcd5f44131ee3b555a60a7e6bfa7d8d67267d6c87315a8c3c93b969d4d8e17" name="python-blivet" arch="src">
  <version epoch="1" ver="0.61.15.76" rel="1.el7_9"/>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.67-1" date="1518004800">- fcoe: remove /etc/fcoe dir if it exists before copying configuration
  (rvykydal)
  Resolves: rhbz#1482512
- Find and remove stale LVM metadata immediately after creating md array.
  (dlehman)
  Resolves: rhbz#1223564
- Add ability to specify vg by uuid for vgremove. (dlehman)
  Related: rhbz#1223564</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.68-1" date="1518177600">- Catch lvm metadata lookup failure in md post create. (dlehman)
  Related: rhbz#1223564
  Resolves: rhbz#1543579</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.69-1" date="1519214400">- Fix accounting for metadata when growing lvm. (dlehman)</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.70-1" date="1529668800">- Deactivate incomplete VGs along with everything else. (dlehman)
  Resolves: rhbz#1554224
- Work around udev timing issues. (dlehman)
  Resolves: rhbz#1592253
  Resolves: rhbz#1592191
- nvdimm: don't crash on non-block devices (rvykydal)
  Related: rhbz#1280500
- Add NVDIMM detection to "addUdevDiskDevice" (vtrefny)
  Related: rhbz#1558942
- Add 'NVDIMMNamespaceDevice' device representing NVDIMM namespaces (vtrefny)
  Related: rhbz#1558942
- Add a function for identifying NVDIMM namespaces (vtrefny)
  Related: rhbz#1558942
- Add a singleton for NVDIMM namespaces management (vtrefny)
  Resolves: rhbz#1558942
- Backport DependencyGuard from master (vtrefny)
  Related: rhbz#1558942
- Ignore nvdimm devices unless configured in kickstart (rvykydal)
  Related: rhbz#1280500
- Do not ignore nvdimm (pmemX) devices (rvykydal)
  Related: rhbz#1280500</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.71-1" date="1532606400">- Remove dependency on libblockdev-nvdimm (vtrefny)
  Resolves: rhbz#1601557
- Do not try to load NVDIMM plugin on non-x86_64 architectures (vtrefny)
  Related: rhbz#1601557
- Add version to the LUKS format (vtrefny)
  Resolves: rhbz#1607830</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 0.61.15.72-1" date="1535976000">- Install ndctl when NVDIMMs are used. (dlehman)
  Related: rhbz#1600496
- Escape dots in lvm filter devices (vtrefny)
  Resolves: rhbz#1614039</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 0.61.15.73-1" date="1553601600">- Use --yes when calling pvresize (vtrefny)
  Related: rhbz#1657000
- Fix typo in partitioning test cleanup. (dlehman)
  Related: rhbz#1657000
- Remove selinux test that doesn't do anything meaningful. (dlehman)
  Related: rhbz#1657000
- Improve parsing of mdadm detail output. (dlehman)
  Related: rhbz#1657000
- Update btrfs tests to use sufficiently large loop devices. (dlehman)
  Related: rhbz#1657000
- vfat labels apparently cannot contain lower case characters. (dlehman)
  Related: rhbz#1657000
- Check label format regardless of mechanism used to set it. (dlehman)
  Related: rhbz#1657000
- Adapt to presence or absence of python-mock. (dlehman)
  Related: rhbz#1657000
- Fixed KS forcing zerombr onto RO disk (japokorn)
  Resolves: rhbz#1544425
- Tell LVM to wipe cachepool metadata when attaching the cachepool (vtrefny)
  Resolves: rhbz#1643531
- Add dependency on python-six (vtrefny)
  Resolves: rhbz#1647173</changelog>
  <changelog author="David Lehman &lt;dlehman@redhat.com&gt; - 0.61.15.74-1" date="1560859200">- Handle exceptions raised from parted.Disk ctor. (dlehman)
  Related: rhbz#1677383
- Recommend DASD disk label for disks with an existing DASD label (vtrefny)
  Resolves: rhbz#1677383</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 0.61.15.75-1" date="1565697600">- Always set default key size to 512 bits for ciphers with XTS mode (vtrefny)
  Resolves: rhbz#1716674</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 0.61.15.76-1" date="1601899200">- edd: Fix UnboundLocalError when trying to close fd in collect_mbrs (vtrefny)
  Related: rhbz#1879920
- Close fd if it fails to read the device (nashok)
  Resolves: rhbz#1879920</changelog>
</package>
<package pkgid="1ab40bec151737b84f779fa8942f31b5f8064857739e2bf76224fcdf170237dc" name="python-flask" arch="src">
  <version epoch="1" ver="0.10.1" rel="7.el7_9"/>
  <changelog author="Ricky Elrod &lt;codeblock@fedoraproject.org&gt; - 0.9-3" date="1344427200">- Unified spec for EL6 and Fedora</changelog>
  <changelog author="Ricky Elrod &lt;codeblock@fedoraproject.org&gt; - 0.9-4" date="1344427201">- Fix changelog messup.</changelog>
  <changelog author="Ricky Elrod &lt;codeblock@fedoraproject.org&gt; - 0.9-5" date="1345204800">- Add epoch to subpackage Requires.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:0.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Ha&#xEF;kel Gu&#xE9;mar &lt;hguemar@fedoraproject.org&gt; - 1:0.10.1-1" date="1371297600">- upstream 0.10.1</changelog>
  <changelog author="Ricky Elrod &lt;codeblock@fedoraproject.org&gt; - 1:0.10.1-2" date="1374321600">- Nuke a Python3 specific file owned by python3-setuptools.</changelog>
  <changelog author="Ha&#xEF;kel Gu&#xE9;mar &lt;hguemar@fedoraproject.org&gt; - 1:0.10.1-3" date="1375099200">- fix wrong requires on sphinx (RHBZ #989361)</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1:0.10.1-4" date="1398772800">- Rebuilt for RHEL 7
- tests disabled</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 1:0.10.1-5" date="1583236800">- Fix CVE-2018-1000656 Denial of Service via crafted JSON (RHBZ #1633596)</changelog>
  <changelog author="Josh Boyer &lt;jwboyer@redhat.com&gt; - 1:0.10.1-7" date="1684152000">- Fix CVE-2023-30861 (RHBZ #2196677 2196643)</changelog>
</package>
<package pkgid="cbc07a5569f33102efa967ead39a8fd0743d9a8e2680d9ec76ae9b9ee45e31fe" name="python-pillow" arch="src">
  <version epoch="0" ver="2.0.0" rel="23.gitd1c6db8.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-13.gitd1c6db8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
</package>
<package pkgid="74f80c08c9a688c25dd74bc3c222a13c970a1e9af21596a9f56843290a001a3f" name="python-pillow" arch="src">
  <version epoch="0" ver="2.0.0" rel="24.gitd1c6db8.el7_9"/>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-14gitd1c6db8" date="1389700800">- Fixed memory corruption.
- Resolves: rhbz#1001122</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-24gitd1c6db8" date="1699876800">- Security fix for CVE-2023-44271
Resolves: RHEL-15459</changelog>
</package>
<package pkgid="9b62631c082bad0b8620646da1b4aa43fa3e3f0c64a2c68440b5424664de1fba" name="python-pillow" arch="src">
  <version epoch="0" ver="2.0.0" rel="25.gitd1c6db8.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.0-15.gitd1c6db8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-17gitd1c6db8" date="1392984000">- Wiped out some memory leaks.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-18gitd1c6db8" date="1408363200">- Disabled webp support on ppc64le due to #962091 and #1127230.
- Updated URL.</changelog>
  <changelog author="Michal Minar &lt;miminar@redhat.com&gt; 2.0.0-19gitd1c6db8" date="1412596800">- Reenabled webp support on little endian archs.</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-20gitd1c6db8" date="1581508800">- Combined fixes for CVE-2020-5312 and CVE-2019-16865
Resolves: rhbz#1789533
Resolves: rhbz#1774066</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-21gitd1c6db8" date="1583323200">- Fix for CVE-2020-5313
Resolves: rhbz#1789532</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-22gitd1c6db8" date="1643976000">- Fix for CVE-2022-22817
Resolves: rhbz#2042527</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.0.0-23gitd1c6db8" date="1644580800">- Fixup for CVE-2022-22817
- Security fixes for CVE-2022-22815, CVE-2022-22816
Resolves: rhbz#2042522</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-24gitd1c6db8" date="1699876800">- Security fix for CVE-2023-44271
Resolves: RHEL-15459</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 2.0.0-25gitd1c6db8" date="1707393600">- Security fix for CVE-2023-50447
Resolves: RHEL-22239</changelog>
</package>
<package pkgid="5598c26795c1fa44fe31f64a84fddb7d5575286009a82738f39b4c139aa68bfd" name="python-reportlab" arch="src">
  <version epoch="0" ver="2.5" rel="11.el7_9"/>
  <changelog author="Konstantin Ryabitsev &lt;icon@fedoraproject.org&gt; - 2.5-2" date="1294315200">- Update to version 2.5 of reportlab.
- Remove tabs in specfile.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-3" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-4" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-5" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Toshio Kuratomi &lt;toshio@fedoraproject.org&gt; - 2.5-6" date="1358337600">- Add a dep on python-imaging to process images</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.5-7" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.5-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.5-10" date="1579003200">- Do not eval strings passed to toColor
- Resolves: #1788553</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 2.5-11" date="1695643200">- Do not evaluate unichar element
- Resolves: RHEL-7011</changelog>
</package>
<package pkgid="ae324b7ee72a53e11d19aaa7cda26adfa8fbf3377178ce1aa7d66c37111098f6" name="python-rtslib" arch="src">
  <version epoch="0" ver="2.1.74" rel="1.el7_9"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-12" date="1528113600">- saveconfig: way to block-level save with delete command</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-13" date="1533729600">- respin a new release to avoid problems with TPS tests</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-1" date="1548763200">- Rebase rtslib to upstream version 2.1.fb69</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-2" date="1550145600">- report the correct size for partitions</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb69-3" date="1557835200">- save_to_file() function breaks symbolic link when saving configuration</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.72-1" date="1585915200">- Update to the latest upstream version</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.74-1" date="1602244800">- Rebase to the latest upstream version</changelog>
</package>
<package pkgid="678910f6480b7391cc6889b72324fa0ca29782d835bbe21cc6d8e1adf7e24058" name="python-s3transfer" arch="src">
  <version epoch="0" ver="0.1.13" rel="1.el7_9.2"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 0.1.5-1" date="1475409600">- Update to 0.1.5</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 0.1.7-1" date="1476100800">- Uodate to 0.1.7</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 0.1.9-1" date="1477569600">- Update to 0.1.9</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.1.9-2" date="1482148800">- Rebuild for Python 3.6</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 0.1.10-1" date="1482926400">- Update to 0.1.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.10-2" date="1486814400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.10-3" date="1501156800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 0.1.10-8" date="1518436800">- Bundle python-futures, python-botocore and python-jmespath

  Resolves: rhbz#1509441</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 0.1.13-1" date="1527163200">- Fix "python2-s3transfer" from EPEL issue by adding it to Obsoletes
- Rebase to v0.1.13 to fix missing "max_bandwidth" issue

  Resolves: rhbz#1576985
  Resolves: rhbz#1578083</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 0.1.13-1.2" date="1645531200">- Upgrade python-botocore to fix IMDSv2 support

  Resolves: rhbz#2050751</changelog>
</package>
<package pkgid="eac8b43f13b7296c17712bb56ee8b6aca93b5385a3d84dddff4f1152a8fce0d2" name="python-twisted-web" arch="src">
  <version epoch="0" ver="12.1.0" rel="8.el7_9"/>
  <changelog author="Julian Sikorski &lt;belegdol@fedoraproject.org&gt; - 11.1.0-2" date="1325937600">- Rebuilt for gcc-4.7</changelog>
  <changelog author="Julian Sikorski &lt;belegdol@fedoraproject.org&gt; - 12.0.0-1" date="1329048000">- Updated to 12.0.0</changelog>
  <changelog author="Julian Sikorski &lt;belegdol@fedoraproject.org&gt; - 12.1.0-1" date="1339934400">- Updated to 12.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 12.1.0-2" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 12.1.0-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 12.1.0-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 12.1.0-5" date="1471003200">- Fix HTTPoxy CVE-2016-1000111
Resolves: rhbz#1358792</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 12.1.0-6" date="1564747200">- Fix CVE-2019-12387 (HTTP Header Injection)
Resolves: rhbz#1721518</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 12.1.0-7" date="1586260800">- Fix CVE-2020-10108 and CVE-2020-10109 multiple HTTP request smuggling vulnderabilities
Resolves: rhbz#1813439 rhbz#1813447
- Remove useless macros definitions</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 12.1.0-8" date="1652961600">- Security fix for CVE-2022-24801: Possible http request smuggling
Resolves: rhbz#2073114</changelog>
</package>
<package pkgid="a3e80353533758f1856c7ba422d49433a213a23f94553e5edaf0768386ffd51b" name="python-virtualenv" arch="src">
  <version epoch="0" ver="15.1.0" rel="5.el7_9"/>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.9.1-2" date="1374062400">- Delete bundled libraries of pip and setuptools</changelog>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.10.1-1" date="1377000000">- Update to v1.10.1 to deal with different securiy issue
Resolves: CVE-2013-1633</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.1-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 1.10.1-3" date="1462795200">- Added a patch that shows a custom error message when a FILE passed to
  virtualenv to be used as 'home dir' already exists and is NOT a directory.
Resolves: rhbz#1306513</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 1.10.1-4" date="1486555200">- Fix Python 3.4 compatibility
Resolves: rhbz#1411685</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-1" date="1505304000">- Rebase to version 15.1.0
- Disable automatic downloads from pypi on new venv creation
Resolves: rhbz#1461154</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-2" date="1505304001">- Add back the versioned virtualenv script
Resolves: rhbz#1461154</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-3" date="1579003200">- Add three new patches for CVEs in bundled urllib3 and requests
CVE-2018-20060, CVE-2019-11236, CVE-2018-18074
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-4" date="1581595200">- Bump
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-5" date="1637582400">- Use the system certs for the bundled pip
Resolves: rhbz#2015326</changelog>
</package>
<package pkgid="e19264d35d8860defedd41efb5b1c44fa32469ca910e438b54f139661ba9daf9" name="python-virtualenv" arch="src">
  <version epoch="0" ver="15.1.0" rel="6.el7_9"/>
  <changelog author="Robert Kuska &lt;rkuska@redhat.com&gt; - 1.10.1-1" date="1377000000">- Update to v1.10.1 to deal with different securiy issue
Resolves: CVE-2013-1633</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.1-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 1.10.1-3" date="1462795200">- Added a patch that shows a custom error message when a FILE passed to
  virtualenv to be used as 'home dir' already exists and is NOT a directory.
Resolves: rhbz#1306513</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 1.10.1-4" date="1486555200">- Fix Python 3.4 compatibility
Resolves: rhbz#1411685</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-1" date="1505304000">- Rebase to version 15.1.0
- Disable automatic downloads from pypi on new venv creation
Resolves: rhbz#1461154</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-2" date="1505304001">- Add back the versioned virtualenv script
Resolves: rhbz#1461154</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-3" date="1579003200">- Add three new patches for CVEs in bundled urllib3 and requests
CVE-2018-20060, CVE-2019-11236, CVE-2018-18074
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-4" date="1581595200">- Bump
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-5" date="1637582400">- Use the system certs for the bundled pip
Resolves: rhbz#2015326</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-6" date="1645617600">- Require again python-setuptools instead of python2-setuptools
Resolves: rhbz#2054827</changelog>
</package>
<package pkgid="af4377ab87b6bbe5c830675a9e3583466f38beb16f8fd83b857696911502d511" name="python-virtualenv" arch="src">
  <version epoch="0" ver="15.1.0" rel="7.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.10.1-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 1.10.1-3" date="1462795200">- Added a patch that shows a custom error message when a FILE passed to
  virtualenv to be used as 'home dir' already exists and is NOT a directory.
Resolves: rhbz#1306513</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 1.10.1-4" date="1486555200">- Fix Python 3.4 compatibility
Resolves: rhbz#1411685</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-1" date="1505304000">- Rebase to version 15.1.0
- Disable automatic downloads from pypi on new venv creation
Resolves: rhbz#1461154</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-2" date="1505304001">- Add back the versioned virtualenv script
Resolves: rhbz#1461154</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-3" date="1579003200">- Add three new patches for CVEs in bundled urllib3 and requests
CVE-2018-20060, CVE-2019-11236, CVE-2018-18074
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-4" date="1581595200">- Bump
Resolves: rhbz#1649153
Resolves: rhbz#1700824
Resolves: rhbz#1643829</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-5" date="1637582400">- Use the system certs for the bundled pip
Resolves: rhbz#2015326</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 15.1.0-6" date="1645617600">- Require again python-setuptools instead of python2-setuptools
Resolves: rhbz#2054827</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 15.1.0-7" date="1652788800">- Security fix for CVE-2019-20916 for the bundled pip wheel
Resolves: rhbz#1868135</changelog>
</package>
<package pkgid="df6047cb1b3f054d959d43e054c413c71d41fa1b81465afebb440257a201a4dd" name="python3" arch="src">
  <version epoch="0" ver="3.6.8" rel="18.el7"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-9" date="1559044800">- Security fix for CVE-2019-9948
Resolves: rhbz#1714642</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
</package>
<package pkgid="1718d4f924c786052f16eca9eba54e05039059089ea3e600735c828e36699afc" name="python3" arch="src">
  <version epoch="0" ver="3.6.8" rel="19.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-10" date="1560254400">- Security fix for CVE-2019-10160
Resolves: rhbz#1718403</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-11" date="1566907200">- Security fix for CVE-2018-20852
Resolves: rhbz#1741552</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
</package>
<package pkgid="c91a0360b64b9315e136a945360df477435dcf27dd1cecdfa23e60c2d0c746e4" name="python3" arch="src">
  <version epoch="0" ver="3.6.8" rel="21.el7_9"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-12" date="1569412800">- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-13" date="1569499200">- Security fix for CVE-2019-16056
Resolves: rhbz#1750774</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-14" date="1583841600">- Provide and obsolete the python36-tools subpackage for EPEL compatibility
Resolves: rhbz#1763730</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-15" date="1584100800">- Security fix for CVE-2019-16935
Resolves: rhbz#1797999</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-16" date="1585915200">- Security fix for CVE-2020-8492
Resolves: rhbz#1810616</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-17" date="1588766400">- Overhaul python's FIPS mode support
Resolves: rhbz#1788459</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-18" date="1596196800">- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-19" date="1685361600">- Security fix for CVE-2023-24329
- Fix the test suite support for Expat &gt;= 2.4.5
Resolves: rhbz#2173917</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-20" date="1695816000">- Security fix for CVE-2023-40217
Resolves: RHEL-3139</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 3.6.8-21" date="1698148800">- Test fixups for CVE-2023-40217
Resolves: RHEL-3139</changelog>
</package>
<package pkgid="d6c4bf5fb53f799259248a657c63fb99a7753f150cd3594eb901bb73516e4e21" name="qemu-kvm" arch="src">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-170.el7" date="1570017600">- kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749735]
- kvm-target-i386-Merge-feature-filtering-checking-functio.patch [bz#1709971]
- kvm-target-i386-Isolate-KVM-specific-code-on-CPU-feature.patch [bz#1709971]
- kvm-i386-Add-new-MSR-indices-for-IA32_PRED_CMD-and-IA32_.patch [bz#1709971]
- kvm-i386-Add-CPUID-bit-and-feature-words-for-IA32_ARCH_C.patch [bz#1709971]
- kvm-Add-support-to-KVM_GET_MSR_FEATURE_INDEX_LIST-an.patch [bz#1709971]
- kvm-x86-Data-structure-changes-to-support-MSR-based-feat.patch [bz#1709971]
- kvm-x86-define-a-new-MSR-based-feature-word-FEATURE_WORD.patch [bz#1709971]
- kvm-Use-KVM_GET_MSR_INDEX_LIST-for-MSR_IA32_ARCH_CAP.patch [bz#1709971]
- kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1709971]
- kvm-Remove-arch-capabilities-deprecation.patch [bz#1709971]
- kvm-target-i386-add-MDS-NO-feature.patch [bz#1714791]
- Resolves: bz#1709971
  ([Intel 7.8 Bug] [KVM][CLX] CPUID_7_0_EDX_ARCH_CAPABILITIES is not enabled in VM qemu-kvm)
- Resolves: bz#1714791
  ([Intel 7.8 FEAT] MDS_NO exposure to guest - qemu-kvm)
- Resolves: bz#1749735
  (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-7])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-171.el7" date="1571140800">- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
</package>
<package pkgid="de24f322b6b9c4a73f01c0c6985a8cdbfbb800b9378a7c424d5aa5333dde86ed" name="qemu-kvm" arch="src">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.4"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-171.el7" date="1571140800">- kvm-i386-Add-new-model-of-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-Disable-OSPKE-on-Cascadelake-Server.patch [bz#1638471]
- kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-Cascadelake-.patch [bz#1638471]
- kvm-Add-missing-brackets-to-CPUID-0x80000008-code.patch [bz#1760607]
- Resolves: bz#1638471
  ([Intel 7.8 Feat] qemu-kvm Introduce Cascade Lake (CLX) cpu model)
- Resolves: bz#1760607
  (Corrupted EAX values due to missing brackets at CPUID[0x800000008] code)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
</package>
<package pkgid="fd029c38282555634e635b48732c1a7cd28ac175c9381c3f7fc423109e31a99d" name="qemu-kvm" arch="src">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.5"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-172.el7" date="1575547200">- kvm-target-i386-Export-TAA_NO-bit-to-guests.patch [bz#1771961]
- kvm-target-i386-add-support-for-MSR_IA32_TSX_CTRL.patch [bz#1771961]
- Resolves: bz#1771961
  (CVE-2019-11135 qemu-kvm: hw: TSX Transaction Asynchronous Abort (TAA) [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.5" date="1636718400">- kvm-dma-helpers-Initialize-DMAAIOCB-in_cancel-flag.patch [bz#2007036]
- Resolves: bz#2007036
  (Memory leak when using dma_read/write with virtio-scsi)</changelog>
</package>
<package pkgid="33dabd8fc424731c892af44d76639c237b0886a32ed61a555d909c8a2d870f58" name="qemu-kvm" arch="src">
  <version epoch="10" ver="1.5.3" rel="175.el7_9.6"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-173.el7" date="1579780800">- kvm-tcp_emu-Fix-oob-access.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791560]
- kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791560]
- Resolves: bz#1791560
  (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-7.8])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-174.el7" date="1584619200">- kvm-util-add-slirp_fmt-helpers2.patch [bz#1800515]
- kvm-tcp_emu-fix-unsafe-snprintf-usages2.patch [bz#1800515]
- kvm-slirp-disable-tcp_emu.patch [bz#1791679]
- kvm-gluster-Handle-changed-glfs_ftruncate-signature.patch [bz#1802215]
- kvm-gluster-the-glfs_io_cbk-callback-function-pointer-ad.patch [bz#1802215]
- kvm-seccomp-set-the-seccomp-filter-to-all-threads.patch [bz#1618503]
- Resolves: bz#1618503
  (qemu-kvm: Qemu: seccomp: blacklist is not applied to all threads [rhel-7])
- Resolves: bz#1791679
  (QEMU: Slirp: disable emulation of tcp programs like ftp IRC etc. [rhel-7])
- Resolves: bz#1800515
  (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-7.9])
- Resolves: bz#1802215
  (Add support for newer glusterfs)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1591012800">- kvm-vnc-fix-memory-leak-when-vnc-disconnect.patch [bz#1810408]
- Resolves: bz#1810408
  (CVE-2019-20382 qemu-kvm: QEMU: vnc: memory leakage upon disconnect [rhel-7])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7" date="1599566400">- kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1837565]
- kvm-usb-check-RNDIS-message-length.patch [bz#1869693]
- kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869693]
- Resolves: bz#1837565
  (CVE-2020-1983 qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-7])
- Resolves: bz#1869693
  (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.1" date="1599566401">- Fixing release number for z-stream</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.2" date="1605614400">- kvm-hw-net-vmxnet_tx_pkt-fix-assertion-failure-in-vmxnet.patch [bz#1860960]
- kvm-hw-core-loader-Fix-possible-crash-in-rom_copy.patch [bz#1842923]
- Resolves: bz#1842923
  (CVE-2020-13765 qemu-kvm: QEMU: loader: OOB access while loading registered ROM may lead to code execution [rhel-7.9.z])
- Resolves: bz#1860960
  (CVE-2020-16092 qemu-kvm: QEMU: reachable assertion failure in net_tx_pkt_add_raw_fragment() in hw/net/net_tx_pkt.c [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.3" date="1609848000">- kvm-Suppress-prototype-warning-for-nss-headers.patch [bz#1884997]
- Resolves: bz#1884997
  (qemu-kvm FTBFS on rhel7.9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.4" date="1620388800">- kvm-ide-atapi-check-logical-block-address-and-read-size-.patch [bz#1917449]
- Resolves: bz#1917449
  (CVE-2020-29443 qemu-kvm: QEMU: ide: atapi: OOB access while processing read commands [rhel-7.9.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.5" date="1636718400">- kvm-dma-helpers-Initialize-DMAAIOCB-in_cancel-flag.patch [bz#2007036]
- Resolves: bz#2007036
  (Memory leak when using dma_read/write with virtio-scsi)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 1.5.3-175.el7_9.6" date="1645790400">- kvm-rbd-avoid-qemu_rbd_snap_list-memory-leaks.patch [bz#2056725]
- Resolves: bz#2056725
  (qemu-kvm leaks on qemu_rbd_snap_list)</changelog>
</package>
<package pkgid="f09565990998c5b3aece504f5fb9ff3a4a3a10bcb287329a720049f15c495d56" name="qt" arch="src">
  <version epoch="1" ver="4.8.7" rel="9.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-8" date="1575633600">- Fix QImage allocation failure in qgifhandler
  Resolves: bz#1667863

- Fix QTgaFile CPU exhaustion
  Resolves: bz#1667879

- Fix QBmpHandler segmentation fault on malformed BMP file
  Resolves: bz#1667862</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1:4.8.7-9" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870297</changelog>
</package>
<package pkgid="b4541cdf6581f1b559e5f9e059fe2039fe60131628a24157dc4b77038999d518" name="qt5-qtbase" arch="src">
  <version epoch="0" ver="5.9.7" rel="5.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-2" date="1504526400">- Enable documentation
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-3" date="1504526401">- Add more rpm macros
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1479097</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-2" date="1515672000">- Avoid error about unbound variable
  Resolves: bz#1533040</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-3" date="1516104000">- Rebuild due to missing RELRO (fixed in binutils)
  Resolves: bz#1534987</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549368000">- Update to 5.9.7
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Enable -doc subpkg on PPC
  Resolves: bz#1564000</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-3" date="1582113600">- Fix multilib issue with qtcore-config.h header file
  Resolves: bz#1534528

- Move libQt5EglFSDeviceIntegration lib into correct subpackage
  Resolves: bz#1792680</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-4" date="1589889600">- Fix: Files placed by attacker can influence the working directory and lead to malicious code execution
  Resolves: bz#1814740
  Resolves: bz#1814685</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-5" date="1600948800">- Fix buffer overflow in XBM parser
  Resolves: bz#1870365</changelog>
</package>
<package pkgid="cec31ad4700cc2ab86fe59e2fb5308015c402bdb0beef2401cc65c3cef39e2d0" name="qt5-qtimageformats" arch="src">
  <version epoch="0" ver="5.9.7" rel="2.el7_9"/>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 5.6.0-3" date="1458475200">- rebuild</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.0-4" date="1460030400">- Initial version for RHEL
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.0-5" date="1460548800">- Enable documentation
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.1-1" date="1465387200">- Update to 5.6.1
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.1-10" date="1472558400">- Increase build version to have newer version than in EPEL
  Resolves: bz#1317404</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.6.2-1" date="1484136000">- Update to 5.6.2
  Resolves: bz#1384821</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.1-1" date="1503057600">- Update to 5.9.1
  Resolves: bz#1482782</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.2-1" date="1507291200">- Update to 5.9.2
  Resolves: bz#1482782</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-1" date="1549540800">- Update to 5.9.7
  Resolves: bz#1564007</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.9.7-2" date="1621944000">- libwebp security fixes:
  Resolves: bz#1961742
  Resolves: bz#1961743
  Resolves: bz#1961744
  Resolves: bz#1961745</changelog>
</package>
<package pkgid="e6e9ea31d3d1a7bfdcbba8c3162d180a3d1608f83d363f0bd8e4dd147cc8579b" name="rdma-core" arch="src">
  <version epoch="0" ver="22.4" rel="6.el7_9"/>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-1" date="1553688000">- Update to upstream v22.1 release with stable-v22 branch fixes
- Add support for Broadcom 57500 RoCE adapter
- Resolves: rhbz#1678274</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-2" date="1556798400">- Refresh stable-v22 branch fixes
- Add ConnectX-6 DX device IDs
- Resolves: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.1-3" date="1559217600">- Actually apply ConnectX-6 DX device ID patch
- Related: rhbz#1687426</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.3-1" date="1566907200">- Update to v22.3 stable release
- Unclamp IPoIP MTUs
- Resolves: rhbz#1647541</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 22.4-1" date="1574337600">- Update to v22.4 stable release
- Support mlx5 scatter to CQE over DCT QP
- Fix ibacm segfault on non-IB hardware
- Resolves: rhbz#1715489
- Resolves: rhbz#1712296</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-2" date="1582113600">- Fix ibacm segfault for dual port HCA support IB and Ethernet
- Resolves: rhbz#1793585</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-3" date="1585569600">- Restore three patches
- Resolves: rhbz#1817412</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-4" date="1588075200">- libbnxt_re support for some new device ids and generation id
- Resolves: rhbz#1828482</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-5" date="1591444800">- libibverbs: Fix ABI_placeholder1 and ABI_placeholder2 assignment
- Resolves: rhbz#1843221</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 22.4-6" date="1618228800">- rdma-ndd: fix udev racy issue for system with multiple InfiniBand HCAs
- Resolves: rhbz#1937699</changelog>
</package>
<package pkgid="9bf3ccae0d25212c428a8af29be573515ed38fc201bf03b1e0cf998ed1fb0ca4" name="realmd" arch="src">
  <version epoch="0" ver="0.16.1" rel="12.el7_9.1"/>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.16.1-4" date="1441972800">- Fix regressions in 0.16.x releases
- Resolves: rhbz#1258745
- Resolves: rhbz#1258488</changelog>
  <changelog author="Stef Walter &lt;stefw@redhat.com&gt; - 0.16.1-5" date="1444996800">- Revert 0.16.1-4
- Use samba by default
- Resolves: rhbz#1271618</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-6" date="1467115200">- Resolves: rhbz#1258745
- Resolves: rhbz#1258488
- Resolves: rhbz#1267563
- Resolves: rhbz#1293390
- Resolves: rhbz#1273924
- Resolves: rhbz#1274368
- Resolves: rhbz#1291924</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-7" date="1469448000">doc: add computer-name to realm man page
- Related: rhbz#1293390</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-8" date="1469620800">Fix man page reference in systemd service file
- Resolves: rhbz#1360702</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-9" date="1473249600">Rebuild to fix wrong doc path
- Resolves: rhbz#1360702</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-10" date="1528977600">Use current Samba options and read NetBIOS name from keytab
- Resolves: rhbz#1484072
- Resolves: rhbz#1370457</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-11" date="1534852800">Improve fix for rhbz#1370457 and fix Coverity issues
- Resolves: rhbz#1370457</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-12" date="1588939200">Fixes for RHEL-7.9
- Resolves: rhbz#1625001
- Resolves: rhbz#1625005
- Resolves: rhbz#1638396
- Resolves: rhbz#1714223
- Resolves: rhbz#1832134</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.16.1-12.1" date="1606305600">use 'additional dns hostnames' with net ads join
- Resolves: rhbz#1849696</changelog>
</package>
<package pkgid="74d9521fffc904de71d5f6c819e9f1744d024639465f64a7c8baf0bd2d36b13f" name="rear" arch="src">
  <version epoch="0" ver="2.4" rel="15.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-3" date="1546516800">- Backport fixes for upstream bugs 1974 and 1975
- Apply upstream PR1954 (record permanent MAC address for bond members)
- Apply upstream PR2004 (support for custom network interface naming)
- Backport fix for upstream bug 1926 (support for LACP bonding and teaming)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
</package>
<package pkgid="302497d1129bcea9023e6b6582f0a299d9e02ce767812f95cafcb43b745c57d0" name="rear" arch="src">
  <version epoch="0" ver="2.4" rel="16.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-4" date="1551182400">- Apply upstream PR2034 (multipath optimizations for lots of devices)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-16" date="1650974400">- Apply upstream PR2237 to include multipath disks in backup</changelog>
</package>
<package pkgid="c8eb3a0d79fc28f43721ed78e2d2fa80bddf9411a4e8e8e760b97f355a673a6c" name="rear" arch="src">
  <version epoch="0" ver="2.4" rel="17.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-5" date="1552478400">- Apply upstream PR2065 (record permanent MAC address for team members)
  Resolves: rhbz1685166</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-7" date="1553601600">- Backport fix for upstream bug 1913 (backup succeeds in case of tar error)
  Resolves: rhbz1631183
- Apply upstream patch PR1885
  Partition information recorded is unexpected when disk has 4K block size
  Resolves: rhbz1610638
- Apply upstream patch PR1887
  LPAR/PPC64 bootlist is incorrectly set when having multiple 'prep' partitions
  Resolves: rhbz1610647
- Apply upstream patch PR1993
  Automatically exclude $BUILD_DIR from the backup
  Resolves: rhbz1655956
- Require xorriso instead of genisoimage, it is now the preferred method
  and supports files over 4GB in size.
  Resolves: rhbz1462189</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-8" date="1564488000">- Backport fix for upstream issue 2187 (disklayout.conf file contains
  duplicate lines, breaking recovery in migration mode or when
  thin pools are used). PR2194, 2196.
  Resolves: rhbz1732328</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-9" date="1564574400">- Apply upstream PR2173 - Cannot restore using Bacula method
  due to "bconsole" not showing its prompt
  Resolves: rhbz1726982</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-11" date="1566907200">- Apply upstream PR2122: add additional NBU library path to fix support for
  NetBackup 8.
  Resolves: rhbz1700807
- Apply upstream PR212: Be safe against empty docker_root_dir (issue 1989)
  Resolves: rhbz1711123, where ReaR can not create a backup in rescue mode,
  because it thinks that the Docker daemon is running and hits the problem
  with empty docker_root_dir.
- Apply upstream PR2223 and commit 36cf20e to avoid an empty string in the
  list of users to clone, which can lead to bash overflow with lots of users
  and groups per user and to wrong passwd/group files in the rescue system.
  Resolves: rhbz1692575
- Backport of Upstream fix for issue 2035: /run is not mounted in the rescue
  chroot, which causes LVM to hang, especially if rebuilding initramfs.
  Resolves: rhbz1697815
- Backport upstream PR 2218: avoid keeping build dir on errors
  by default when used noninteractively
  Resolves: rhbz1693608</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-12" date="1587384000">- Apply upstream PR2346: Have '-iso-level 3' option also for ppc64le
  Resolves: rhbz1726043</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 2.4-13" date="1591272000">- Apply upstream PR2373: Skip Longhorn Engine replica devices
  Resolves: rhbz1842984</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-15" date="1639656000">- Backport PR2608:
  Fix setting boot path in case of UEFI partition (ESP) on MD RAID
  Resolves: rhbz1945869
- Backport PR2625 &amp; 2675
  Prevents accidental backup removal in case of errors
  Resolves: rhbz1843585
- Fix rsync error and option handling
  Fixes metadata storage when rsync user is not root
  Resolves: rhbz1947064
- Changes for NetBackup (NBU) support, upstream PR2544
  Resolves: rhbz2031833
- On POWER add bootlist &amp; ofpathname to the list of required programs
  conditionally (bootlist only if running under PowerVM, ofpathname
  always except on PowerNV) - upstream PR2665, add them to package
  dependencies
  Resolves: rhbz1983008
- On POWER mount /sys in the chroot, otherwise ofpathname does not work
  and we risk ending up with not instlaling the bootloader properly
  Resolves: rhbz1983000</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-16" date="1650974400">- Apply upstream PR2237 to include multipath disks in backup</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.4-17" date="1687176000">- Apply PR2431 to migrate XFS configuration files
- Fix typo in default.conf
  Resolves: #1882060</changelog>
</package>
<package pkgid="17d9adb9ba9b66ae57578b8a7ecd944e07d9320064df2bc0dcb0746ac55a7106" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.11"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
</package>
<package pkgid="a3b8c4cd344c5b275cfe1e125d0e6fea1ffd9664db3ae7d9756964736709057a" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.13"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
</package>
<package pkgid="9702a61866ac0d3f30d6864b9558902c36068ef1cc470bad9a0bb06b7aac113c" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.15"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
</package>
<package pkgid="4bb2cd3e65bb470892500bd3d53cae8e7ac7e396ed1cb8c76970ae0daba46ff2" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.18"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.17" date="1665144000">- awsvip: dont partially match similar IPs during monitor-action

  Resolves: rhbz#1940097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.18" date="1666267200">- db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check

  Resolves: rhbz#2127477</changelog>
</package>
<package pkgid="08640336e539e80d999b7cd9ea2409b7c3180ca853e61d09355b76abe686b01a" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.20"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.9" date="1615464000">- azure-lb: redirect to avoid nc dying with EPIPE error

  Resolves: rhbz#1937151</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.10" date="1616673600">- aws-vpc-move-ip: add ENI lookup

  Resolves: rhbz#1939282</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.11" date="1619006400">- gcp-pd-move: dont stop partially matched "disk_name"

  Resolves: rhbz#1935798</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.13" date="1626955200">- SAPHana: use actual_mode from global.ini and fallback to mode when
  it's not set

  Resolves: rhbz#1855888</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.15" date="1643112000">- gcp-pd-move/gcp-vpc-move-route/gcp-vpc-move-vip: dont fail with
  configuration rc when it might be a network hickup

  Resolves: rhbz#2042070</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.17" date="1665144000">- awsvip: dont partially match similar IPs during monitor-action

  Resolves: rhbz#1940097</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.18" date="1666267200">- db2: add PRIMARY/REMOTE_CATCHUP_PENDING/CONNECTED status to promote-check

  Resolves: rhbz#2127477</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.20" date="1706184000">- bundled pycryptodome: fix CVE-2023-52323

  Resolves: RHEL-20914</changelog>
</package>
<package pkgid="a4a8e5a2728d310ce7519df38f49d92e551d31e7c67540ec9807058a2feb2e90" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.4"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-54" date="1588075200">- aws-vpc-route53: new resource agent for AWS
- aws-vpc-move-ip: add "routing_table_role" parameter
- aws-vpc-move-ip: delete remaining route entries

  Resolves: rhbz#1759113
  Resolves: rhbz#1810466
  Resolves: rhbz#1828895</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
</package>
<package pkgid="10533822f7ee65b6b36b3f63a901750ae476d4de201a89fa9d32f8a499b00f77" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.5"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-55" date="1588248000">- sap-cluster-connector: allow dashes/underscores in nodenames

  Resolves: rhbz#1829085</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248001">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
</package>
<package pkgid="7a9cc621e5b93251bba128d53fd84340b93585c66a93eb8720d69ea0c72d0059" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1" rel="61.el7_9.8"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-56" date="1588248000">- sap-hana-scaleout: set default timeouts based on recommendations
  and a couple of bugfixes

  Resolves: rhbz#1829081</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-58" date="1589889600">- db2 (HADR): promote standby node when master node disappears

  Resolves: rhbz#1720283</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-59" date="1590667200">- gcp-pd-move: new resource agent for Google Cloud

  Resolves: rhbz#1633249</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-60" date="1590753600">- nfsserver: fix NFSv4-only support

  Resolves: rhbz#1840750</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61" date="1591704000">- exportfs: add symlink support

  Resolves: rhbz#1601950</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.1" date="1596456000">- gcp-vpc-move-vip: add support for multiple alias IPs
- sybaseASE: run verify action during start action only
- azure-events: handle exceptions in urlopen

  Resolves: rhbz#1846732
  Resolves: rhbz#1848673
  Resolves: rhbz#1862121</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.2" date="1598443200">- azure-lb: fix redirect issue

  Resolves: rhbz#1850779</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.4" date="1601640000">- Upgrade bundled python-httplib2 to fix CVE-2020-11078

  Resolves: rhbz#1850992</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.5" date="1609761600">- AWS agents: add support for IMDSv2

  Resolves: rhbz#1905737</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.1.1-61.8" date="1614600000">- gcp-vpc-move-route, gcp-vpc-move-vip: add project parameter and
  make vpc_network parameter optional

  Resolves: rhbz#1913936</changelog>
</package>
<package pkgid="b74867c95a145da828eae0278b4fad6f2af87126dd9b07354ed251f471426546" name="rhel-system-roles" arch="src">
  <version epoch="0" ver="0.4" rel="1.el7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0-0.1.20170504" date="1493899200">- Initial release.
- kdump r. fe8bb81966b60fa8979f3816a12b0c7120d71140
- postfix r. 43eec5668425d295dce3801216c19b1916df1f9b
- selinux r. 1e4a21f929455e5e76dda0b12867abaa63795ae7
- timesync r. 33a1a8c349de10d6281ed83d4c791e9177d7a141
- tuned r. 2e8bb068b9815bc84287e9b6dc6177295ffdf38b
- network r. 03ff040df78a14409a0d89eba1235b8f3e50a750</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.1-1" date="1495108800">- Update to 0.1 (first upstream release).
- Remove the tuned role, it is not ready yet.
- Move the example playbooks to /usr/share/doc/rhel-system-roles/$SUBSYSTEM
  directly to get rid of an extra directory.
- Depend on ansible.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.1-2" date="1495454400">- Prefix the roles in examples and documentation with rhel-system-roles.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.2-1" date="1496750400">- Update the networking role to version 0.2 (#1459203)
- Version every role and the package separately. They live in separate repos
  and upstream release tags are not coordinated.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.2-2" date="1498478400">- Leave a copy of README and COPYING in every role's directory, as suggested by T. Bowling.
- Move the network example inventory to the documentation directory together.
  with the example playbooks and delete the now empty "examples" directory.
- Use proper reserved (by RFC 7042) MAC addresses in the network examples.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.3-1" date="1502193600">- Change the prefix to linux-system-roles., keeping compatibility
  symlinks.
- Update the network role to dace7654feb7b5629ded0734c598e087c2713265:
  adds InfiniBand support and other fixes.
- Drop a patch included upstream.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.3-2" date="1502193601">- We can't change directories to symlinks (rpm bug #447156) so keep the old
  names and create the new names as symlinks.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.4-1" date="1503921600">- network: update to b9b6f0a7969e400d8d6ba0ac97f69593aa1e8fa5:
  ensure that state:absent followed by state:up works (bz#1478910), and change
  the example IP adresses to the IANA-assigned ones.
- SELinux: fix the case when SELinux is disabled (bz#1479546).</changelog>
</package>
<package pkgid="0b5c382ac3455ec957cdd6160b94c31da1acb3e6c3b978c58ea9fdaf56ca85ae" name="rhel-system-roles" arch="src">
  <version epoch="0" ver="0.5" rel="1.el7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0-0.1.20170504" date="1493899200">- Initial release.
- kdump r. fe8bb81966b60fa8979f3816a12b0c7120d71140
- postfix r. 43eec5668425d295dce3801216c19b1916df1f9b
- selinux r. 1e4a21f929455e5e76dda0b12867abaa63795ae7
- timesync r. 33a1a8c349de10d6281ed83d4c791e9177d7a141
- tuned r. 2e8bb068b9815bc84287e9b6dc6177295ffdf38b
- network r. 03ff040df78a14409a0d89eba1235b8f3e50a750</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.1-1" date="1495108800">- Update to 0.1 (first upstream release).
- Remove the tuned role, it is not ready yet.
- Move the example playbooks to /usr/share/doc/rhel-system-roles/$SUBSYSTEM
  directly to get rid of an extra directory.
- Depend on ansible.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.1-2" date="1495454400">- Prefix the roles in examples and documentation with rhel-system-roles.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.2-1" date="1496750400">- Update the networking role to version 0.2 (#1459203)
- Version every role and the package separately. They live in separate repos
  and upstream release tags are not coordinated.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.2-2" date="1498478400">- Leave a copy of README and COPYING in every role's directory, as suggested by T. Bowling.
- Move the network example inventory to the documentation directory together.
  with the example playbooks and delete the now empty "examples" directory.
- Use proper reserved (by RFC 7042) MAC addresses in the network examples.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.3-1" date="1502193600">- Change the prefix to linux-system-roles., keeping compatibility
  symlinks.
- Update the network role to dace7654feb7b5629ded0734c598e087c2713265:
  adds InfiniBand support and other fixes.
- Drop a patch included upstream.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.3-2" date="1502193601">- We can't change directories to symlinks (rpm bug #447156) so keep the old
  names and create the new names as symlinks.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.4-1" date="1503921600">- network: update to b9b6f0a7969e400d8d6ba0ac97f69593aa1e8fa5:
  ensure that state:absent followed by state:up works (bz#1478910), and change
  the example IP adresses to the IANA-assigned ones.
- SELinux: fix the case when SELinux is disabled (bz#1479546).</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.5-1" date="1507032000">- SELinux: fix policy reload when SELinux is disabled on CentOS/RHEL 6
  (bz#1493574)
- network: update to b856c7481bf5274d419f71fb62029ea0044b3ec1 :
  makes the network role idempotent (bz#1476053) and fixes manual
  network provider selection (bz#1485074).</changelog>
</package>
<package pkgid="391ed71b6010073982d2d6a0d1dd1743297467360d764bed2e3c34795fa189c1" name="rhel-system-roles" arch="src">
  <version epoch="0" ver="0.5" rel="3.el7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.1-1" date="1495108800">- Update to 0.1 (first upstream release).
- Remove the tuned role, it is not ready yet.
- Move the example playbooks to /usr/share/doc/rhel-system-roles/$SUBSYSTEM
  directly to get rid of an extra directory.
- Depend on ansible.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.1-2" date="1495454400">- Prefix the roles in examples and documentation with rhel-system-roles.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.2-1" date="1496750400">- Update the networking role to version 0.2 (#1459203)
- Version every role and the package separately. They live in separate repos
  and upstream release tags are not coordinated.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.2-2" date="1498478400">- Leave a copy of README and COPYING in every role's directory, as suggested by T. Bowling.
- Move the network example inventory to the documentation directory together.
  with the example playbooks and delete the now empty "examples" directory.
- Use proper reserved (by RFC 7042) MAC addresses in the network examples.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.3-1" date="1502193600">- Change the prefix to linux-system-roles., keeping compatibility
  symlinks.
- Update the network role to dace7654feb7b5629ded0734c598e087c2713265:
  adds InfiniBand support and other fixes.
- Drop a patch included upstream.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.3-2" date="1502193601">- We can't change directories to symlinks (rpm bug #447156) so keep the old
  names and create the new names as symlinks.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.4-1" date="1503921600">- network: update to b9b6f0a7969e400d8d6ba0ac97f69593aa1e8fa5:
  ensure that state:absent followed by state:up works (bz#1478910), and change
  the example IP adresses to the IANA-assigned ones.
- SELinux: fix the case when SELinux is disabled (bz#1479546).</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.5-1" date="1507032000">- SELinux: fix policy reload when SELinux is disabled on CentOS/RHEL 6
  (bz#1493574)
- network: update to b856c7481bf5274d419f71fb62029ea0044b3ec1 :
  makes the network role idempotent (bz#1476053) and fixes manual
  network provider selection (bz#1485074).</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.5-2" date="1510056000">- kdump: add ssh support. upstream PR#9, rhbz1478707</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.5-3" date="1513684800">- kdump: fix the wrong conditional for ssh checking and improve test (PR#10)</changelog>
</package>
<package pkgid="9023b1d9d9e6d01fef316b73a62c7749cebee3e69e7e20c093337f8b6b6c6beb" name="rhel-system-roles" arch="src">
  <version epoch="0" ver="0.6" rel="3.el7"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.2-2" date="1498478400">- Leave a copy of README and COPYING in every role's directory, as suggested by T. Bowling.
- Move the network example inventory to the documentation directory together.
  with the example playbooks and delete the now empty "examples" directory.
- Use proper reserved (by RFC 7042) MAC addresses in the network examples.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.3-1" date="1502193600">- Change the prefix to linux-system-roles., keeping compatibility
  symlinks.
- Update the network role to dace7654feb7b5629ded0734c598e087c2713265:
  adds InfiniBand support and other fixes.
- Drop a patch included upstream.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.3-2" date="1502193601">- We can't change directories to symlinks (rpm bug #447156) so keep the old
  names and create the new names as symlinks.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.4-1" date="1503921600">- network: update to b9b6f0a7969e400d8d6ba0ac97f69593aa1e8fa5:
  ensure that state:absent followed by state:up works (bz#1478910), and change
  the example IP adresses to the IANA-assigned ones.
- SELinux: fix the case when SELinux is disabled (bz#1479546).</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.5-1" date="1507032000">- SELinux: fix policy reload when SELinux is disabled on CentOS/RHEL 6
  (bz#1493574)
- network: update to b856c7481bf5274d419f71fb62029ea0044b3ec1 :
  makes the network role idempotent (bz#1476053) and fixes manual
  network provider selection (bz#1485074).</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.5-2" date="1510056000">- kdump: add ssh support. upstream PR#9, rhbz1478707</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.5-3" date="1513684800">- kdump: fix the wrong conditional for ssh checking and improve test (PR#10)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.6-1" date="1517313600">- Drop hard dependency on ansible (#1525655), patch from Yaakov Selkowitz
- Update the network role to version 0.4, solves bz#1487747, bz#1478576</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.6-2" date="1520596800">- Document network role options: static routes, ethernet, dns
  Upstream PR#36, bz1550128, documents bz1487747 and bz1478576</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 0.6-3" date="1521028800">- Minor corrections of the previous change by Till Maas.</changelog>
</package>
<package pkgid="429b1c22344eb75e992188e7480828e41c62fce614f43ef3fe600cad35edd3ac" name="rhel-system-roles" arch="src">
  <version epoch="0" ver="1.0.1" rel="4.el7_9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.0-4" date="1534420800">- Add Obsoletes for the -techpreview subpackage</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.0-5" date="1541505600">- spec file improvement: Unify the source macros with deftag() and defcommit()
- Update to upstream released versions and drop unnecessary patches.
- Unify the spec file with Fedora (no functional changes intended).
- Misc spec file comments fixes (by Mike DePaulo)
- Fix rpmlint error by escaping a previous changelog entry with a macro (by Mike DePaulo)
- Comply with Fedora guidelines by always using "cp -p" in %install (by Mike DePaulo)
- Rebase network role - doc improvements, Fedora 29 and Ansible 2.7 support
- Regenerate network role patch to apply without offset
- Rebase kdump role to fix a forgotten edit, rhbz#1645633
- Update timesync examples: add var prefix (rhbz#1642152), correct role prefix</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.0-7" date="1557748800">- kdump: copy the dump target's public host key to the managed node known_hosts
  PR #22, rhbz#1651342</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.0-8" date="1559563200">- Rebase the selinux role, fixes typo in tests, uncovered by Ansible 2.7,
  (rhbz#1651285) and lists all input variables of the selinux role in defaults
  to make Satellite aware of them (rhbz#1674000, PR#43)
- Rebase the kdump role to fix check mode problems: rhbz#1716689
- Rebase the timesync role: fixes check mode problems (rhbz#1716689)
  and lists all input variables in defaults (rhbz#1674000)
- Rebase the network role: keeps the interface up for state: up
  if persistent_state is absent and solves problems with defining
  VLAN and MACVLAN interface types (issue #19) (rhbz#1686866)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.0-10" date="1579089600">- Update tests for the network role
- Fix typo in a test for the timesync role
- Rebase the network role to add support for device features (PR#115,
  rhbz#1696703) and atomic changes (PR#119, rhbz#1695161)
- Add the storage role
- Depend on python-jmespath as Ansible&gt;2.8 will not ship it, rhbz#1774096</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.0-12" date="1591704000">- Rebase the network role
  Resolves rhbz#1767177, rhbz#1842605, rhbz#1789813, rhbz#1724280
- Tag tests suitable for Tier1 testing, rhbz#1732085
  In network role, do not use the tier1 tags, won't be needed.
- Fix or workaround test problems in network role,
  rhbz#1842614, rhbz#1842619, rhbz#1842621
- Set _python_bytecompile_errors_terminate_build to 0, otherwise
  brp-python-bytecompile chokes on network/tests/ensure_provider_tests.py</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.0.1-1" date="1624968000">- Synchronize roles with rhel-8.4.0.
  Update roles kdump, selinux, timesync, network, and storage.
  Add new roles metrics, tlog, kernel_settings, logging, nbde_server,
  nbde_client, certificate, crypto_policies, sshd, ssh, and ha_cluster.
- Synchronize spec file with rawhide's up to commit 6218fe9.
  Related: rhbz#1970165</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.0.1-2" date="1625659200">- Fix an invalid indentation in the spec file.
  Related: rhbz#1970165
- Mention bz1854189 here as it was fixed in backporting rhel-8.4.0.
  Related: rhbz#1854189
- Remove gating.yaml which was introduced in backporting rhel-8.4.0.
  Related: rhbz#197016</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.0.1-3" date="1626436800">- Fix the tier1 test failure in network due to the epel repo not enabled.
  Related: rhbz#1970165</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.0.1-4" date="1627041600">- Remove unnecessary dependency on python3-netaddr
  Related: rhbz#1970165</changelog>
</package>
<package pkgid="4d5ac5a04556b4094518f2cb72be5563aded1c77f6a965d7696d4f6f87b3384d" name="rhel-system-roles" arch="src">
  <version epoch="0" ver="1.7.3" rel="4.el7_9"/>
  <changelog author="Rich Megginson &lt;rmeggins@redhat.com&gt; - 1.6.5-1" date="1630411200">- kernel_settings - Disable bootloader testing on EL9
  (Resolves rhbz#1991017)
  Related: rhbz#2029621</changelog>
  <changelog author="Rich Megginson &lt;rmeggins@redhat.com&gt; - 1.6.6-1" date="1630411201">- logging, certificate - Instead of the archive module, use "tar" command for backup.
  (Resolves rhbz#1984182 (EL9))
  (Resolves rhbz#1987096 (EL8))
- logging - Add a support for list value to server_host in the elasticsearch output
  (Resolves rhbz#1986460 (EL9))
  (Resolves rhbz#1986463 (EL8))
- logging - tests_relp.yml; Can't detect any of the required Python libraries cryptography (&gt;= 1.2.3) or PyOpenSSL (&gt;= 0.6)
  (Resolves rhbz#1989962 (EL9))
  (Resolves rhbz#1990142 (EL8))
  Related: rhbz#2029621</changelog>
  <changelog author="Rich Megginson &lt;rmeggins@redhat.com&gt; - 1.6.7-1" date="1630411202">- storage - tests_create_lvmvdo_then_remove fails - Module dm-vdo not found
  (Resolves rhbz#1991141 (EL8))
  (Resolves rhbz#1991062 (EL9))
- storage - Get syntax errors in tests_lvm_errors.yml
  (Resolves rhbz#1990793 (EL8))
  (Resolves rhbz#1991142 (EL9))
  Related: rhbz#2029621</changelog>
  <changelog author="Rich Megginson &lt;rmeggins@redhat.com&gt; - 1.7.0-1" date="1630411203">- drop support for Ansible 2.8 - min_ansible_version is now 2.9
  (Resolves rhbz#1989197 (EL9))
  (Resolves rhbz#1989199 (EL8))
- sshd - fix rhel6 support - failed to validate: error:Missing Match criteria for all Bad Match condition
  (Resolves rhbz#1991598 (EL9))
  (Resolves rhbz#1990947 (EL8))
  Related: rhbz#2029621</changelog>
  <changelog author="Rich Megginson &lt;rmeggins@redhat.com&gt; - 1.7.1-1" date="1630411204">- metrics - the bpftrace role does not properly configure bpftrace agent
  (Resolves rhbz#1994180 (EL9))
  (Resolves rhbz#1993240 (EL8))
  Related: rhbz#2029621</changelog>
  <changelog author="Rich Megginson &lt;rmeggins@redhat.com&gt; - 1.7.2-1" date="1630411205">- logging - Update the certificates copy tasks
  (Resolves rhbz#1996777 (EL9))
  (Resolves rhbz#1994580 (EL8))
  Related: rhbz#2029621</changelog>
  <changelog author="Rich Megginson &lt;rmeggins@redhat.com&gt; - 1.7.3-1" date="1630411206">- storage - revert the dm-vdo workaround fix for vdo testing
  (Resolves rhbz#1978488 (EL9))
  (Resolves rhbz#1991141 (EL8))
  Related: rhbz#2029621</changelog>
  <changelog author="Rich Megginson &lt;rmeggins@redhat.com&gt; - 1.7.3-2" date="1630411207">- selinux - tag tests_selinux_disabled.yml with tests::avc
  (Resolves rhbz#1996315 (EL9))
  (Resolves rhbz#1996317 (EL8))
  Related: rhbz#2029621</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.7.3-3" date="1643371200">- network - Fix problem when switch provider from initscript to nm
  Resolves: rhbz#2038956</changelog>
  <changelog author="Noriko Hosoi &lt;nhosoi@redhat.com&gt; - 1.7.3-4" date="1644321600">- certificate - certificate: error traceback /tmp/certificate-tests-venv/bin/certreader2json
  Resolves: rhbz#2051758</changelog>
</package>
<package pkgid="2119cedcf7fe70cd51cff930bb4d37b0ba130428ef1e05cfa6039f7c2b8c3ead" name="rhel-system-roles-sap" arch="src">
  <version epoch="0" ver="0.7.2" rel="10.el7_9"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-1" date="1569931200">- rebase to 0.7.2 (upstream-version 2019-09-30_18-11-12)</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-2" date="1570449600">- drop requirement on rhel-system-roles</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-3" date="1570449601">- own some directories</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-4" date="1571140800">- add missing sap_hana_preconfigure_min_packages_7.8</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-5" date="1571227200">- always use ansible_hostname + ansible_domain instead of ansible_fqdn
- use {{ ansible_hostname }}.{{ ansible_domain }} instead of {{ ansible_fqdn }}
- added LC_ALL=C before commands for which the outputs are to be evaluated</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-6" date="1584014400">- add missing sap_hana_preconfigure_min_packages_7.9</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-7" date="1603281600">- Resolves: #1888163 - sap-preconfigure role stops if firewalld is not installed</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-8" date="1604318400">- Related: #1888163 - sap-preconfigure role stops if firewalld is not installed</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-9" date="1606996800">- Resolves: #1888189 - debug message is printed instead of a warning</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-10" date="1611576000">- Related: #1888189 - print output warning in red</changelog>
</package>
<package pkgid="8cdcadd753f856860185ba257e2bab27f495c7c95cde9bee53d2f4c11996c876" name="rhel-system-roles-sap" arch="src">
  <version epoch="0" ver="0.7.2" rel="3.el7_7"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7-1" date="1565352000">- Initial release.</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.1-1" date="1568376000">- rebase to 0.7.1 (upstream-version 2019-09-12)</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-1" date="1569931200">- rebase to 0.7.2 (upstream-version 2019-09-30_18-11-12)</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-2" date="1570449600">- drop requirement on rhel-system-roles</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-3" date="1570449601">- own some directories</changelog>
</package>
<package pkgid="bef06382bb9a85d1c345b4bb4a319b084ac4ed6d9f2ca6b730163715a999f349" name="rhel-system-roles-sap" arch="src">
  <version epoch="0" ver="0.7.2" rel="5.el7"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7-1" date="1565352000">- Initial release.</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.1-1" date="1568376000">- rebase to 0.7.1 (upstream-version 2019-09-12)</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-1" date="1569931200">- rebase to 0.7.2 (upstream-version 2019-09-30_18-11-12)</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-2" date="1570449600">- drop requirement on rhel-system-roles</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-3" date="1570449601">- own some directories</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-4" date="1571140800">- add missing sap_hana_preconfigure_min_packages_7.8</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-5" date="1571227200">- always use ansible_hostname + ansible_domain instead of ansible_fqdn
- use {{ ansible_hostname }}.{{ ansible_domain }} instead of {{ ansible_fqdn }}
- added LC_ALL=C before commands for which the outputs are to be evaluated</changelog>
</package>
<package pkgid="37a139c60f4f24d9dcf35be180d29bb7a14f66dd9deb309f53c0ff3407a32a54" name="rhel-system-roles-sap" arch="src">
  <version epoch="0" ver="0.7.2" rel="6.el7"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7-1" date="1565352000">- Initial release.</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.1-1" date="1568376000">- rebase to 0.7.1 (upstream-version 2019-09-12)</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-1" date="1569931200">- rebase to 0.7.2 (upstream-version 2019-09-30_18-11-12)</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-2" date="1570449600">- drop requirement on rhel-system-roles</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-3" date="1570449601">- own some directories</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-4" date="1571140800">- add missing sap_hana_preconfigure_min_packages_7.8</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-5" date="1571227200">- always use ansible_hostname + ansible_domain instead of ansible_fqdn
- use {{ ansible_hostname }}.{{ ansible_domain }} instead of {{ ansible_fqdn }}
- added LC_ALL=C before commands for which the outputs are to be evaluated</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.7.2-6" date="1584014400">- add missing sap_hana_preconfigure_min_packages_7.9</changelog>
</package>
<package pkgid="9d6acacf043c5105fecc72a7c60e5ac60263923999f002bc2540ae2d66792ae4" name="rpm" arch="src">
  <version epoch="0" ver="4.11.3" rel="46.el7_9"/>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-37" date="1553083200">- Use user and group of the rpmbuild process or root for sources (#1572772)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-38" date="1553169600">- Add flag to use strip -g instead of full strip on DSOs (#1663264)</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169601">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
</package>
<package pkgid="af7fb5e3660972c4170a3dd1d8f61b539cfa61227c6ae7329aabd46fdf37c9e2" name="rpm" arch="src">
  <version epoch="0" ver="4.11.3" rel="48.el7_9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.11.3-39" date="1553169600">- Fix brp-python-bytecompile script to work with Python 3 packages (#1691402)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-40" date="1558872000">- Remove only special perl dependencies provided in the same file (#1570181)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-41" date="1565956800">- Fix bogus if-condition in find-debuginfo.sh (#1720590)</changelog>
  <changelog author="Pavlina Moravcova Varekova &lt;pmoravco@redhat.com&gt; - 4.11.3-42" date="1566388800">- Fix segfault on fingerprint symlink (#1660232)</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 4.11.3-43" date="1570190400">- Fix packages getting removed on failed update via dnf (#1710691)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-44" date="1590580800">- Accept PGP public keys with missing EOL (#1840006)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-45" date="1591099200">- Actually apply the previous patch</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-46" date="1631880000">- Bump up the limit of signature header to 64MB (#1993242)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-47" date="1634817600">- Improve range checks on signature and main header tags (#2004228)
- Fixes CVE-2021-20271</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.11.3-48" date="1635768000">- Fix double-free in previously added patch (#2004228)</changelog>
</package>
<package pkgid="fded55c9aed255b1f3e7547976c4b26a6f55f568ab521ef32802204c6e956910" name="rpmdevtools" arch="src">
  <version epoch="0" ver="8.3" rel="8.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 8.2-2" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 8.2-3" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 8.3-1" date="1346587200">- Update to 8.3.
- Drop specfile constructs no longer needed with Fedora's rpm.</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 8.3-2" date="1350388800">- xemacs is not available on RHEL (RHBZ#866841)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 8.3-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 8.3-3.1" date="1376481600">- removed fakeroot requirement and all qa_robot scripts (RHBZ#840780)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 8.3-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 8.3-6" date="1585569600">- spectool: ignore query string in URL (RHBZ#1337544)
- Update upstream URLs (RHBZ#1502423)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 8.3-7" date="1587038400">- Actually apply the spectool patch (RHBZ#1337544)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 8.3-8" date="1606132800">- spectool: fix regression in URL fragment handling (RHBZ#1899112)</changelog>
</package>
<package pkgid="26d0ce707630fd8df6ba624bc9788cee4c0ffcff0769a439abc893e9c0d7888e" name="rsync" arch="src">
  <version epoch="0" ver="3.1.2" rel="11.el7_9"/>
  <changelog author="Michal Ruprich - 3.0.9-18" date="1485259200">- Resolves: #1324754 -  rsyncd unit enters failed state on exit</changelog>
  <changelog author="Michal Ruprich - 3.1.2-1" date="1504094400">- Resolves: #1432899 - Rebase rsync to version &gt;= 3.1.0
- rebase to 3.1.2</changelog>
  <changelog author="Michal Ruprich - 3.1.2-4" date="1508328000">- Related: #1432899 - removing dependencies on perl
- using the bundled zlib.h(#1491582)
- turning on upstream tests</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-5" date="1534766400">- Resolves: #1615799 - Rsync built-in testsuite fails with selinux enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-6" date="1534766401">- Related: #1615799 - reverting changes made in RHEL-7.6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-7" date="1553601600">- Resolves: #1690786 - remove-source-files fails with symlinks</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-8" date="1563710400">- Resolves: #1566149 - rsync without --verbose still writes "(new) backup_dir is ..." to STDOUT</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-9" date="1563796800">- Resolves: #1633850 - rsync is unable to preserve NFS v4 ACLs via extended attributes</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-10" date="1566561600">- Resolves: #1672779 - Rsync bug resets modification time of every destination file that has not changed</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-11" date="1660651200">- Resolves: #2111170 - remote arbitrary files write inside the directories of connecting peers</changelog>
</package>
<package pkgid="d872fb1bc2d362d42d4a9fd7fd795b265d420f1b760bac71b6813009292ef465" name="rsync" arch="src">
  <version epoch="0" ver="3.1.2" rel="12.el7_9"/>
  <changelog author="Michal Ruprich - 3.1.2-1" date="1504094400">- Resolves: #1432899 - Rebase rsync to version &gt;= 3.1.0
- rebase to 3.1.2</changelog>
  <changelog author="Michal Ruprich - 3.1.2-4" date="1508328000">- Related: #1432899 - removing dependencies on perl
- using the bundled zlib.h(#1491582)
- turning on upstream tests</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-5" date="1534766400">- Resolves: #1615799 - Rsync built-in testsuite fails with selinux enabled</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-6" date="1534766401">- Related: #1615799 - reverting changes made in RHEL-7.6</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-7" date="1553601600">- Resolves: #1690786 - remove-source-files fails with symlinks</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-8" date="1563710400">- Resolves: #1566149 - rsync without --verbose still writes "(new) backup_dir is ..." to STDOUT</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-9" date="1563796800">- Resolves: #1633850 - rsync is unable to preserve NFS v4 ACLs via extended attributes</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-10" date="1566561600">- Resolves: #1672779 - Rsync bug resets modification time of every destination file that has not changed</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-11" date="1660651200">- Resolves: #2111170 - remote arbitrary files write inside the directories of connecting peers</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.1.2-12" date="1667908800">- Resolves: #2123815 - rsync error: protocol incompatibility when using rsync-3.1.2-11.el7_9</changelog>
</package>
<package pkgid="8cf09343bd6c276a33f7cfaa5dfc659fdb5e334890ffd806de78b7fe89217f87" name="rsyslog" arch="src">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.1"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-46" date="1566993600">RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
  resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
  resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
  resolves: rhbz#1744682</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
</package>
<package pkgid="0326b2e0bc69372b14354bfba43fb78dc33e45a15fd694681da4e13ac7ba1c00" name="rsyslog" arch="src">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.2"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-47" date="1567684800">RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
  resolves: rhbz#1744856</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
</package>
<package pkgid="83a82e54e1b1baa202b8da1faa56878f980f9a76326a8e846b4d5c4ca845fe44" name="rsyslog" arch="src">
  <version epoch="0" ver="8.24.0" rel="57.el7_9.3"/>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-48" date="1573041600">RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
  resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
  resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
  resolves: rhbz#1768323
- added patch implementing file ID for imfile
  resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
  resolves: rhbz#1600171</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-49" date="1573128000">RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
  resolves: rhbz#1696686 (failedQA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-52" date="1574856000">RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
  also improved file-id behavior to adress newly found problems
  resolves: rhbz#1763746</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-53" date="1585224000">RHEL 7.9 ERRATUM
- one more fix for file ID patch to extend to offline behavior
  resolves: rhbz#1806493
- added patch resoving race in serialization resulting in crash
  resolves: rhbz#1778841</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-54" date="1589371200">RHEL 7.9 ERRATUM
- edited cert chains patch to not cause memory leaks
  resolves: rhbz#1832087</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-55" date="1591704000">RHEL 7.9 ERRATUM
- edited imfile file-id patch to not segfault on selinux block
  resolves: rhbz#1843992</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-57" date="1597665600">RHEL 7.9 ERRATUM
- added patch resolving buffer overflows in select() function
  resolves: rhbz#1858297</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.1" date="1617192000">RHEL 7.9.Z ERRATUM
- added patch resolving theoretically "too large" groups
  resolves:rhbz#1944717</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.2" date="1647604800">RHEL 7.9.Z ERRATUM
- guard HUP signal processing in ompipe module
  resolves:rhbz#2062505</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 8.24.0-57.3" date="1652270400">- Address CVE-2022-24903, Heap-based overflow in TCP syslog server
  resolves: rhbz#2081395</changelog>
</package>
<package pkgid="eff3ebba8c6e8b7c8c6981cdf4709aeb9baecae86013a4ca951abaab7f0a1547" name="ruby" arch="src">
  <version epoch="0" ver="2.0.0.648" rel="39.el7_9"/>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-28" date="1465214400">- Fix missing declaration of 'rb_frame_last_func'
  Related: rhbz#1197720</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.0.648-29" date="1465387200">- Fix hostname size limit
  Resolves: rhbz#1343945</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-30" date="1488369600">- Fix test_npn_protocol_selection_ary and test_npn_protocol_selection_enum
  failures with newest openssl.
  Resolves: rhbz#1416123
- Add gemspec_add_dep and gemspec_remove_dep macros.
- Extend 'gem_' macros for pre-release version support.
  Resolves: rhbz#1397390
- Make symlinks for json gem.
  Resolves: rhbz#1308992</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-31" date="1516017600">- Fix unsafe object deserialization in RubyGems (CVE-2017-0903).
  * ruby-2.4.3-CVE-2017-0903-Fix-unsafe-object-deserialization
      -vulnerability.patch
  Resolves: CVE-2017-0903
- Fix an ANSI escape sequence vulnerability (CVE-2017-0899).
  Resolves: CVE-2017-0899
- Fix a DOS vulernerability in the query command (CVE-2017-0900).
  Resolves: CVE-2017-0900
- Fix a vulnerability in the gem installer that allowed a malicious gem
    to overwrite arbitrary files (CVE-2017-0901).
  Resolves: CVE-2017-0901
- Fix a DNS request hijacking vulnerability (CVE-2017-0902).
  * ruby-2.2.8-lib-rubygems-fix-several-vulnerabilities-in-RubyGems.patch
  Resolves: CVE-2017-0902
- Fix buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898).
  * ruby-2.2.8-Buffer-underrun-vulnerability-in-Kernel.sprintf.patch
  Resolves: CVE-2017-0898
- Escape sequence injection vulnerability in the Basic
    authentication of WEBrick (CVE-2017-10784).
  * ruby-2.2.8-sanitize-any-type-of-logs.patch
  Resolves: CVE-2017-10784
- Arbitrary heap exposure during a JSON.generate call (CVE-2017-14064).
  * ruby-2.2.8-Fix-arbitrary-heap-exposure-during-a-JSON.generate-call.patch
  Resolves: CVE-2017-14064
- Command injection vulnerability in Net::FTP (CVE-2017-17405).
  * ruby-2.2.9-Fix-a-command-injection-vulnerability-in-Net-FTP.patch
  Resolves: CVE-2017-17405
- Buffer underrun in OpenSSL ASN1 decode (CVE-2017-14033).
  * ruby-2.2.8-asn1-fix-out-of-bounds-read-in-decoding-constructed-objects.patch
  Resolves: CVE-2017-14033
- Command injection in lib/resolv.rb:lazy_initialize() allows arbitrary code
    execution(CVE-2017-17790).
  * ruby-2.5.0-Fixed-command-Injection.patch
  Resolves: CVE-2017-17790</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-32" date="1518782400">- Add Psych.safe_load
  * ruby-2.1.0-there-should-be-only-one-exception.patch
  * ruby-2.1.0-Adding-Psych.safe_load.patch
  Related: CVE-2017-0903
- Disable Tokyo TZ tests broken by recen tzdata update.
  * ruby-2.5.0-Disable-Tokyo-TZ-tests.patch
  Related: CVE-2017-0903</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-33" date="1519041600">- Fix always passing WEBrick test.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-34" date="1541073600">- CVE-2018-16395: Fix OpenSSL::X509::Name equality check does not work.
  Resolves: CVE-2018-16395</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 2.0.0.648-35" date="1549281600">- Kill bundled certificates.
- Add macros to edit files lists in .gemspec
- Fix buffer under-read in String#unpack
  Resolves: CVE-2018-8778
- Fix HTTP response splitting in WEBrick
  Resolves: CVE-2017-17742
- Fix DoS by large request in WEBrick
  Resolves: CVE-2018-8777
- Fix directory traversal by poisoned NULL byte in Dir.
  Resolves: CVE-2018-8780
- Fix file and directory creation with directory traversal.
  Resolves: CVE-2018-6914
- Fix socket creation by poisoned NULL byte.
  Resolves: CVE-2018-8779
- Fix: return default path with nonexistent home dir
- Fix flags not propagated in Array#pack and String#unpack.
  Resolves: CVE-2018-16396
- Fix strictly interpret octal fields in tar headers.
  Resolves: CVE-2018-1000075
- Fix a security error for duplicate files in a package.
  Resolves: CVE-2018-1000076
- Enforce URL validation on spec homepage attribute.
  Resolves: CVE-2018-1000077
- Mitigate XSS vulnerability in homepage attribute.
  Resolves: CVE-2018-1000078
- Prevent Path Traversal issue during gem installation.
  Resolves: CVE-2018-1000079
- Fix unsafe Object Deserialization Vulnerability in gem owner.
  Resolves: CVE-2018-1000074
- Refresh expired certificates.
- Fix path traversal when writing to a symlinked basedir outside of the root
  Resolves: CVE-2018-1000073</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-36" date="1554379200">- Introduce `Gem::UserInteraction#verbose` method as precondition to fix
  CVE-2019-8321.
  * rubygems-2.3.0-refactor-checking-really_verbose.patch
- Fix escape sequence injection vulnerability in verbose.
- Fix escape sequence injection vulnerability in gem owner.
  Resolves: CVE-2019-8322
- Fix escape sequence injection vulnerability in API response handling.
  Resolves: CVE-2019-8323
- Prohibit arbitrary code execution when installing a malicious gem.
  Resolves: CVE-2019-8324
- Fix escape sequence injection vulnerability in errors.
  Resolves: CVE-2019-8325
  * ruby-2.4.6-Applied-security-patches-for-RubyGems.patch</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.0.648-39" date="1631534400">- Bump the release to fix the upgrade path from RHEL7 EUS.
  Resolves: rhbz#1993504</changelog>
</package>
<package pkgid="d3975d2e832ff4938ef615e160b6f54094fa8b5f2570de358b7223660669bd71" name="runc" arch="src">
  <version epoch="0" ver="1.0.0" rel="69.rc10.el7_9"/>
  <changelog author="Frantisek Kluknavsky &lt;fkluknav@redhat.com&gt; - 1.0.0-60.dev.git2abd837" date="1549886400">- update golang toolchain macros</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-61.dev.git2abd837" date="1559908800">- Resolves: #1676705 - correct URL field</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-62.rc8" date="1561464000">- Resolves: #1723480
- bump to v1.0.0-rc8</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-63.rc8" date="1562241600">- Resolves: #1724778</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-64.rc8" date="1562846400">- Resolves: #1728762 - update change-default-root.patch</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.0.0-65.rc8" date="1564747200">- rebase to 1.0.0-65 in RHEL7u7</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.0.0-66.rc9" date="1575374400">- update to rc9
- Related: RHELPLAN-26239</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.0.0-67.rc10" date="1581681600">- address CVE-2019-19921 by updating to rc10
- Resolves: #1803100</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.0.0-68.rc10" date="1587384000">- fix "RHEL 7.8: cleaning up mounts of Kubernetes service account secrets of deleted pods failing"
- Resolves: #1823374</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.0.0-69.rc10" date="1621425600">- fix CVE-2021-30465
- Resolves: #1959474</changelog>
</package>
<package pkgid="5307a2868834dcd4eb3780e3be33aa3831d8390919ad4ec6652bee7a51293dcb" name="runc" arch="src">
  <version epoch="0" ver="1.0.0" rel="70.rc10.el7_9"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-61.dev.git2abd837" date="1559908800">- Resolves: #1676705 - correct URL field</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-62.rc8" date="1561464000">- Resolves: #1723480
- bump to v1.0.0-rc8</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-63.rc8" date="1562241600">- Resolves: #1724778</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.0-64.rc8" date="1562846400">- Resolves: #1728762 - update change-default-root.patch</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.0.0-65.rc8" date="1564747200">- rebase to 1.0.0-65 in RHEL7u7</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.0.0-66.rc9" date="1575374400">- update to rc9
- Related: RHELPLAN-26239</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.0.0-67.rc10" date="1581681600">- address CVE-2019-19921 by updating to rc10
- Resolves: #1803100</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.0.0-68.rc10" date="1587384000">- fix "RHEL 7.8: cleaning up mounts of Kubernetes service account secrets of deleted pods failing"
- Resolves: #1823374</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.0.0-69.rc10" date="1621425600">- fix CVE-2021-30465
- Resolves: #1959474</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.0.0-70.rc10" date="1706788800">- apply patch for CVE-2024-21626
- Resolves: RHEL-21862</changelog>
</package>
<package pkgid="47c0d19a3b83a8bcbc078807bb74a891aa097aa0ff924d9c0a8999b47356894b" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="13.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
</package>
<package pkgid="e13bbb77d0fd79b4b2b87a574dc992b1fe7e9047a4ac585fed0cd71dcf678180" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="15.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
</package>
<package pkgid="1ae1ecc9bd4cac5541fbe4a7616701c25b483b5990f5900e25adae346798ebee" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="17.el7_9"/>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
</package>
<package pkgid="c5489399b839e66705ac4b0ac60614ff8e49804d3f673a869c694bf28601e517" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="18.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
</package>
<package pkgid="cc33c02e26cf896ce29233b562a11352317226791f2860d319721907486763df" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="19.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
</package>
<package pkgid="240f43be4b3a086113a302759e64f4090da76f8dec50dcb4b8e98c7ba7d7829e" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="20.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-10" date="1608638400">- resolves: #1868327 - Fix winbind in trust scenaries with connection issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-11" date="1611144000">- resolves: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
</package>
<package pkgid="1f864cd533baff420f101e07f094725deffa2ea5a6556210f2b10a1d89ffc3af" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="24.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-13" date="1612353600">- related: #1876839 - Fix double crash when requesting share mode lock</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
</package>
<package pkgid="ae7a678de66549b486a04e6613d8613927e8e11c5e7cdcaf6710674f834c4c89" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="25.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-14" date="1618228800">- resolves: #1937867 - Fix possible core dump with printing support
- resolves: #1930747 - Ensure that libwbclient has been updated before
                       restarting services</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-15" date="1619438400">- resolves: #1949444 - Fix CVE-2021-20254</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-16" date="1636372800">- resolves: #2019661 - Fix CVE-2016-2124
- resolves: #2019673 - Fix CVE-2020-25717
- resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-17" date="1636977600">- related: #2019673 - Add missing checks for IPA DC server role</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-18" date="1643112000">- resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
- resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
- resolves: #2046148 - Fix CVE-2021-44142</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-19" date="1652184000">- resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                       mapping for uid/gid conflict</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-20" date="1661860800">- resolves: #2119058 - Fix possible segfault in winbind</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-23" date="1671624000">- resolves: #2154364 - Fix CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-24" date="1674216000">- related: #2154364 - Add additional patches for CVE-2022-38023</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-25" date="1690286400">- resolves: #2222250 - Fix netlogon capabilities level 2</changelog>
</package>
<package pkgid="0cb473f49298275e0c5ea20d23514749c08a21dd78e0c939d471f7ab0d9ab7c9" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="5.el7"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.13-1" date="1580731200">- resolves: #1785121 - Rebase to vesion 4.10.13
- resolves: #1791208 - Fix CVE-2019-14907
- resolves: #1737888 - Fix manual libwbclient alternative settings
- resolves: #1634057 - Return correct stat for SMB1 with POSIX extensions</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.13-2" date="1587038400">- resolves: #1810511 - Fix net-ads-keytab-create to include UPN</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-1" date="1588248000">- related: #1785121 - Rebase to version 4.10.15
- resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
- resolves: #1801496 - Add missing ctdb directories</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.15-2" date="1588593600">- resolves: #1825505 - Compilation of samba sources fails on RHEL</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
</package>
<package pkgid="2a2e9ea7db58268e188c1a9c100361efd22d464b642182c0045ba41311c149df" name="samba" arch="src">
  <version epoch="0" ver="4.10.16" rel="9.el7_9"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-3" date="1588680000">- Removed patch for #1634057</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-4" date="1588852800">- resolves: #1813017 - Fix smbclient log to file</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.15-5" date="1589889600">- resolves: #1831986 - Fix gencache for normal users</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-1" date="1590408000">- related: #1785121 - Rebase to version 4.10.16</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-2" date="1591099200">- resolves: #1828354 - add additioanl hostnames to the keytab
- resolves: #1836427 - add dnshostname option net-ads-join</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10-16-5" date="1591185600">- related: #1785121 - Add missing RPM Requires</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-6" date="1594900800">- resolves: #1852812 - Fix additioanl hostnames with win DC</changelog>
  <changelog author="Isaac Boukris &lt;iboukris@redhat.com&gt; - 4.10.16-7" date="1595332800">- related: #1852812 - trigger a rebuild to get the right tag</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.16-8" date="1604318400">- resolves: #1878205 - Fix restarting winbind on package upgrade
- resolves: #1892632 - Fix CVE-2020-14318
- resolves: #1891687 - Fix CVE-2020-14323
- resolves: #1879834 - Fix CVE-2020-1472
- resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
- resolves: #1868917 - Fix %U substitution for 'valid users' option
- resolves: #1853272 - Fix 'require_membership_of' documentation in
                       pam_winbind{.conf} manpage</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.10.17-9" date="1604664000">- related: #1853272 - Add back missing patch hunks</changelog>
</package>
<package pkgid="cf663a7b1ef10c46dd6e128c79a3e3b08b3fdd6c5a11ff0362d7c44cada2d85f" name="sapconf" arch="src">
  <version epoch="0" ver="0.98" rel="16.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.98-7" date="1431950400">- Do not wait for input from keyboard and read from file instead
  Resolves: bz#1188233
- Add information about sapconf version
  Resolves: bz#1205269
- Remove unnecessary installed package groups
  Resolves: bz#1193983
- Check whether 99-sap-limits.conf file exists to prevent an error
  Resolves: bz#1205229
- Add force mode
  Resolves: bz#1205691
- Add yum-utils as dependency
  Resolves: bz#1220471</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.98-8" date="1460116800">- consider ntp configured via ntp package
  Resolves: bz#1228550
- add correct parameter for repoquery
  Resolves: bz#1235608</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.98-9" date="1474372800">- fix depends on dmidecode on s390x/ppc64 
  Resolves: bz#1377766</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.98-10" date="1478865600">- sapconf cannot go with default values kernel.shmall and kernel.shmmax
  Resolves: bz#1391881</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.98-11" date="1489665600">- sapconf fails on hostnames with exactly 13 characters
  Resolves: bz#1432572</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.98-12" date="1505131200">- sapconf does not identify EUS SAP channel a s a SAP channel
  Resolves: bz#1470563

- sapconf does not check if limits are set before adding it's own entires
  Resolves: bz#1474024</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.98-13" date="1506513600">- add requirement on bc for sapconf
  Resolves: bz#1496184</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.98-14" date="1509969600">- Resolves: bz#1509913, add missing dependency for bind-utils</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.98-15" date="1509969601">- Resolves: bz#1509921 - sapconf does not identify E4S SAP channel as a SAP channel</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.98-16" date="1601553600">- Resolves: #1870062, set nofile to 65536</changelog>
</package>
<package pkgid="e2ec6475417dbf03f6b95486a810e015e3d03288119747568e1cb7c676eb4e17" name="scap-security-guide" arch="src">
  <version epoch="0" ver="0.1.52" rel="2.el7_9"/>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.49-6" date="1588593600">- Added a patch fixing audit_rules_privileged_commands (RHBZ#1691877)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.49-7" date="1588593601">- Bug fixes on CIS profile (RHBZ#1821633)
  Added Ansible remediations
  Fixed CIS references
  Fixed integration issues with CIS profile</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.49-8" date="1589198400">- Fix specfile to apply patch (RHBZ#1691877)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.49-9" date="1589284800">- CIS Profile fixes (RHBZ#1821633)
  - Fix Ansible mount_option template
  - Add Ansible for ensure_logrotate_activated
  - Add warnings to rpm_verify_permissions and ownership about findindings that may need further inspection</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.49-10" date="1589889600">- CIS Profile fixes (RHBZ#1821633)
  - Fix Ansible mount_option template
  - Re-order rpm_verify_permissions to avoid file permission conflicts</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.49-11" date="1589976000">- HIPAA Profile improvement (RHBZ#1513087)
  - Add Ansible remediation for audit_rules_system_shutdown</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.49-12" date="1590062400">- CIS Profile (RHBZ#1821633)
  - Make sure boot target is multi-user.target when xorg package is removed
  - Add CIS Profile content attribution to Center for Internet Security</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.49-13" date="1590494400">- Add example kickstart for RHEL7 HIPAA (RHBZ#1513087)
- Fix Test Suite to run on Python3</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.52-1" date="1602158400">- Update to the latest upstream release (RHBZ#1665233)
- Update RHEL7 DISA STIG to V2R8 (RHBZ#1665233)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.52-2" date="1606478400">- Update RHEL7 DISA STIG to V3R1 (RHBZ#1665233)</changelog>
</package>
<package pkgid="2f1c6f6d45070286f262adad3088be8c083d325934e009fb8ecb20f962041214" name="scap-security-guide" arch="src">
  <version epoch="0" ver="0.1.54" rel="3.el7_9"/>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.49-9" date="1589284800">- CIS Profile fixes (RHBZ#1821633)
  - Fix Ansible mount_option template
  - Add Ansible for ensure_logrotate_activated
  - Add warnings to rpm_verify_permissions and ownership about findindings that may need further inspection</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.49-10" date="1589889600">- CIS Profile fixes (RHBZ#1821633)
  - Fix Ansible mount_option template
  - Re-order rpm_verify_permissions to avoid file permission conflicts</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.49-11" date="1589976000">- HIPAA Profile improvement (RHBZ#1513087)
  - Add Ansible remediation for audit_rules_system_shutdown</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.49-12" date="1590062400">- CIS Profile (RHBZ#1821633)
  - Make sure boot target is multi-user.target when xorg package is removed
  - Add CIS Profile content attribution to Center for Internet Security</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.49-13" date="1590494400">- Add example kickstart for RHEL7 HIPAA (RHBZ#1513087)
- Fix Test Suite to run on Python3</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.52-1" date="1602158400">- Update to the latest upstream release (RHBZ#1665233)
- Update RHEL7 DISA STIG to V2R8 (RHBZ#1665233)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.52-2" date="1606478400">- Update RHEL7 DISA STIG to V3R1 (RHBZ#1665233)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.54-1" date="1612353600">- Rebase to incorporate ANSSI Profile (RHBZ#1497415)
- Update RHEL7 STIG profile to V3R2 (RHBZ#1921643)
- Add Minimal, Intermediary and Enhanced ANSSI Profiles (RHBZ#1497415)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.54-2" date="1613563200">- Remove Kickstart for not shipped profile (RHBZ#1497415)
- Fix STIG id reference format for sshd_x11_use_localhost (RHBZ#1921643)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.54-3" date="1614168000">- Realign PCI-DSS rules selection to v0.1.54 (RHBZ#1497415)</changelog>
</package>
<package pkgid="d3f18968aa0cb3f541f7313108b5e51f58e9bb5a46489acaf4f6b1c136e89866" name="scap-security-guide" arch="src">
  <version epoch="0" ver="0.1.54" rel="7.el7_9"/>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.49-13" date="1590494400">- Add example kickstart for RHEL7 HIPAA (RHBZ#1513087)
- Fix Test Suite to run on Python3</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.52-1" date="1602158400">- Update to the latest upstream release (RHBZ#1665233)
- Update RHEL7 DISA STIG to V2R8 (RHBZ#1665233)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.52-2" date="1606478400">- Update RHEL7 DISA STIG to V3R1 (RHBZ#1665233)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.54-1" date="1612353600">- Rebase to incorporate ANSSI Profile (RHBZ#1497415)
- Update RHEL7 STIG profile to V3R2 (RHBZ#1921643)
- Add Minimal, Intermediary and Enhanced ANSSI Profiles (RHBZ#1497415)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.54-2" date="1613563200">- Remove Kickstart for not shipped profile (RHBZ#1497415)
- Fix STIG id reference format for sshd_x11_use_localhost (RHBZ#1921643)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.54-3" date="1614168000">- Realign PCI-DSS rules selection to v0.1.54 (RHBZ#1497415)</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.54-4" date="1620648000">- Update RHEL 7 STIG profile to V3R3 (RHBZ#1958789)
- Update ANSSI High Profile (RHBZ#1955180)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.54-5" date="1623153600">- Create subpackage to hold ansible playbooks per rule (RHBZ#1966589)
- Fix Bash remediation of dconf_gnome_login_retries (RHBZ#1967566)</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.54-6" date="1623412800">- Add kickstart files for RHEL 7 stig and stig_gui profiles (RHBZ#1958789)</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.54-7" date="1625054400">- Generate HTML STIG reference tables also for stig_gui profile (RHBZ#1958789)</changelog>
</package>
<package pkgid="29377a7094bd4db9f9afdfeb8dd82fc48ed200ec561b245ca563d51bea10aac6" name="scap-security-guide" arch="src">
  <version epoch="0" ver="0.1.57" rel="4.el7_9"/>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.54-2" date="1613563200">- Remove Kickstart for not shipped profile (RHBZ#1497415)
- Fix STIG id reference format for sshd_x11_use_localhost (RHBZ#1921643)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.54-3" date="1614168000">- Realign PCI-DSS rules selection to v0.1.54 (RHBZ#1497415)</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.54-4" date="1620648000">- Update RHEL 7 STIG profile to V3R3 (RHBZ#1958789)
- Update ANSSI High Profile (RHBZ#1955180)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.54-5" date="1623153600">- Create subpackage to hold ansible playbooks per rule (RHBZ#1966589)
- Fix Bash remediation of dconf_gnome_login_retries (RHBZ#1967566)</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.54-6" date="1623412800">- Add kickstart files for RHEL 7 stig and stig_gui profiles (RHBZ#1958789)</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.54-7" date="1625054400">- Generate HTML STIG reference tables also for stig_gui profile (RHBZ#1958789)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 0.1.57-1" date="1633608000">- Rebase to the 0.1.57 upstream release
- Update RHEL7 DISA STIG profile to v3r4 (RHBZ#1996678)
- Split CIS profile (RHBZ#1953787)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-2" date="1634731200">- Fix auditd_overflow_action configuration path for RHEL7 (RHBZ#1996678)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-3" date="1634817600">- Fix broken SELinux documentation links (RHBZ#1996678)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-4" date="1635854400">- Update RHEL7 DISA STIG profile to v3r5 (RHBZ#1996678)</changelog>
</package>
<package pkgid="f7a36a4770b9ebbaf8b28407b6487a6f01dce9919389209fa482e3a856589884" name="scap-security-guide" arch="src">
  <version epoch="0" ver="0.1.57" rel="6.el7_9"/>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.54-4" date="1620648000">- Update RHEL 7 STIG profile to V3R3 (RHBZ#1958789)
- Update ANSSI High Profile (RHBZ#1955180)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.54-5" date="1623153600">- Create subpackage to hold ansible playbooks per rule (RHBZ#1966589)
- Fix Bash remediation of dconf_gnome_login_retries (RHBZ#1967566)</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.54-6" date="1623412800">- Add kickstart files for RHEL 7 stig and stig_gui profiles (RHBZ#1958789)</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.54-7" date="1625054400">- Generate HTML STIG reference tables also for stig_gui profile (RHBZ#1958789)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 0.1.57-1" date="1633608000">- Rebase to the 0.1.57 upstream release
- Update RHEL7 DISA STIG profile to v3r4 (RHBZ#1996678)
- Split CIS profile (RHBZ#1953787)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-2" date="1634731200">- Fix auditd_overflow_action configuration path for RHEL7 (RHBZ#1996678)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-3" date="1634817600">- Fix broken SELinux documentation links (RHBZ#1996678)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-4" date="1635854400">- Update RHEL7 DISA STIG profile to v3r5 (RHBZ#1996678)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-5" date="1645099200">- Update RHEL7 DISA STIG profile to v3r6 (RHBZ#2049532)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-6" date="1645790400">- Fix bash remediation of sudo_require_reauthentication (RHBZ#2049532)</changelog>
</package>
<package pkgid="d74ba62dc164e8d0310ce7c4dbf5a79336cef7e275b8f1acf07adbe67a4a7c51" name="scap-security-guide" arch="src">
  <version epoch="0" ver="0.1.57" rel="8.el7_9"/>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.54-6" date="1623412800">- Add kickstart files for RHEL 7 stig and stig_gui profiles (RHBZ#1958789)</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.54-7" date="1625054400">- Generate HTML STIG reference tables also for stig_gui profile (RHBZ#1958789)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 0.1.57-1" date="1633608000">- Rebase to the 0.1.57 upstream release
- Update RHEL7 DISA STIG profile to v3r4 (RHBZ#1996678)
- Split CIS profile (RHBZ#1953787)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-2" date="1634731200">- Fix auditd_overflow_action configuration path for RHEL7 (RHBZ#1996678)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-3" date="1634817600">- Fix broken SELinux documentation links (RHBZ#1996678)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-4" date="1635854400">- Update RHEL7 DISA STIG profile to v3r5 (RHBZ#1996678)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-5" date="1645099200">- Update RHEL7 DISA STIG profile to v3r6 (RHBZ#2049532)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-6" date="1645790400">- Fix bash remediation of sudo_require_reauthentication (RHBZ#2049532)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.57-7" date="1651060800">- Add warning how to override audit buffer (RHBZ#1993822)
- Fix name of antivirus package in STIG profile (RHBZ#2066321)
- Update RHEL7 DISA STIG profile to v3r7 (RHBZ#2079217)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.57-8" date="1651579200">- Remove warning how to override audit buffer (RHBZ#1993822)</changelog>
</package>
<package pkgid="c429456f08368c78e29ffcd4a3fc0774cf014de1244c0567dd96c0589e6401ac" name="scap-security-guide" arch="src">
  <version epoch="0" ver="0.1.63" rel="1.el7_9"/>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.54-7" date="1625054400">- Generate HTML STIG reference tables also for stig_gui profile (RHBZ#1958789)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 0.1.57-1" date="1633608000">- Rebase to the 0.1.57 upstream release
- Update RHEL7 DISA STIG profile to v3r4 (RHBZ#1996678)
- Split CIS profile (RHBZ#1953787)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-2" date="1634731200">- Fix auditd_overflow_action configuration path for RHEL7 (RHBZ#1996678)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-3" date="1634817600">- Fix broken SELinux documentation links (RHBZ#1996678)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-4" date="1635854400">- Update RHEL7 DISA STIG profile to v3r5 (RHBZ#1996678)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-5" date="1645099200">- Update RHEL7 DISA STIG profile to v3r6 (RHBZ#2049532)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-6" date="1645790400">- Fix bash remediation of sudo_require_reauthentication (RHBZ#2049532)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.57-7" date="1651060800">- Add warning how to override audit buffer (RHBZ#1993822)
- Fix name of antivirus package in STIG profile (RHBZ#2066321)
- Update RHEL7 DISA STIG profile to v3r7 (RHBZ#2079217)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.57-8" date="1651579200">- Remove warning how to override audit buffer (RHBZ#1993822)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.63-1" date="1660046400">- Update to the latest upstream release (RHBZ#2116359)
- Fix SSH Key permissions (RHBZ#2021258)
- Remove PCI-DSS Benchmark(RHBZ2038165)
- Updated source of CVE data feed(RHBZ#2028432)
- Improved alignment with DISA's RHEL7 STIG(RHBZ#1967950)
- Update RHEL7 STIG profile to v3r8 (RHBZ#2112939)
- Add warning how to override audit buffer (RHBZ#1993822)
- Fix smartcard_auth rule for systems installed without authconfig (RHBZ#2116359)
- Fix check of enable_fips_mode on s390x (RHBZ#2116359)
- Fix applicability of pam_pkcs11 and grub2 rules on s390x (RHBZ#2116359)</changelog>
</package>
<package pkgid="f9f8b531925360f88978329127d3ef4545eeb9861ed71746ed031ae47a585490" name="scap-security-guide" arch="src">
  <version epoch="0" ver="0.1.66" rel="1.el7_9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 0.1.57-1" date="1633608000">- Rebase to the 0.1.57 upstream release
- Update RHEL7 DISA STIG profile to v3r4 (RHBZ#1996678)
- Split CIS profile (RHBZ#1953787)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-2" date="1634731200">- Fix auditd_overflow_action configuration path for RHEL7 (RHBZ#1996678)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-3" date="1634817600">- Fix broken SELinux documentation links (RHBZ#1996678)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-4" date="1635854400">- Update RHEL7 DISA STIG profile to v3r5 (RHBZ#1996678)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-5" date="1645099200">- Update RHEL7 DISA STIG profile to v3r6 (RHBZ#2049532)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-6" date="1645790400">- Fix bash remediation of sudo_require_reauthentication (RHBZ#2049532)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.57-7" date="1651060800">- Add warning how to override audit buffer (RHBZ#1993822)
- Fix name of antivirus package in STIG profile (RHBZ#2066321)
- Update RHEL7 DISA STIG profile to v3r7 (RHBZ#2079217)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.57-8" date="1651579200">- Remove warning how to override audit buffer (RHBZ#1993822)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.63-1" date="1660046400">- Update to the latest upstream release (RHBZ#2116359)
- Fix SSH Key permissions (RHBZ#2021258)
- Remove PCI-DSS Benchmark(RHBZ2038165)
- Updated source of CVE data feed(RHBZ#2028432)
- Improved alignment with DISA's RHEL7 STIG(RHBZ#1967950)
- Update RHEL7 STIG profile to v3r8 (RHBZ#2112939)
- Add warning how to override audit buffer (RHBZ#1993822)
- Fix smartcard_auth rule for systems installed without authconfig (RHBZ#2116359)
- Fix check of enable_fips_mode on s390x (RHBZ#2116359)
- Fix applicability of pam_pkcs11 and grub2 rules on s390x (RHBZ#2116359)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.66-1" date="1676376000">- Rebase to a new upstream release 0.1.66 (RHBZ#2158410)
- Update RHEL7 STIG profile to V3R10 (RHBZ#2152657)
- Align file_permissions_sshd_private_key with DISA Benchmark (RHBZ#2123284)
- Fix remediation of audit watch rules (RHBZ#2123367)
- Fix check firewalld_sshd_port_enabled (RHBZ#2158410)
- Fix accepted control flags for pam_pwhistory (RHBZ#2158410)
- Unselect rule logind_session_timeout (RHBZ#2158410)
- Add support rainer scripts in rsyslog rules (RHBZ#2170038)</changelog>
</package>
<package pkgid="79a8f5152cc89362ace7ac33a0e0205395b3f0405870dbff747f1c688bafb52b" name="scap-security-guide" arch="src">
  <version epoch="0" ver="0.1.69" rel="1.el7_9"/>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-2" date="1634731200">- Fix auditd_overflow_action configuration path for RHEL7 (RHBZ#1996678)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-3" date="1634817600">- Fix broken SELinux documentation links (RHBZ#1996678)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-4" date="1635854400">- Update RHEL7 DISA STIG profile to v3r5 (RHBZ#1996678)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-5" date="1645099200">- Update RHEL7 DISA STIG profile to v3r6 (RHBZ#2049532)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-6" date="1645790400">- Fix bash remediation of sudo_require_reauthentication (RHBZ#2049532)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.57-7" date="1651060800">- Add warning how to override audit buffer (RHBZ#1993822)
- Fix name of antivirus package in STIG profile (RHBZ#2066321)
- Update RHEL7 DISA STIG profile to v3r7 (RHBZ#2079217)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.57-8" date="1651579200">- Remove warning how to override audit buffer (RHBZ#1993822)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.63-1" date="1660046400">- Update to the latest upstream release (RHBZ#2116359)
- Fix SSH Key permissions (RHBZ#2021258)
- Remove PCI-DSS Benchmark(RHBZ2038165)
- Updated source of CVE data feed(RHBZ#2028432)
- Improved alignment with DISA's RHEL7 STIG(RHBZ#1967950)
- Update RHEL7 STIG profile to v3r8 (RHBZ#2112939)
- Add warning how to override audit buffer (RHBZ#1993822)
- Fix smartcard_auth rule for systems installed without authconfig (RHBZ#2116359)
- Fix check of enable_fips_mode on s390x (RHBZ#2116359)
- Fix applicability of pam_pkcs11 and grub2 rules on s390x (RHBZ#2116359)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.66-1" date="1676376000">- Rebase to a new upstream release 0.1.66 (RHBZ#2158410)
- Update RHEL7 STIG profile to V3R10 (RHBZ#2152657)
- Align file_permissions_sshd_private_key with DISA Benchmark (RHBZ#2123284)
- Fix remediation of audit watch rules (RHBZ#2123367)
- Fix check firewalld_sshd_port_enabled (RHBZ#2158410)
- Fix accepted control flags for pam_pwhistory (RHBZ#2158410)
- Unselect rule logind_session_timeout (RHBZ#2158410)
- Add support rainer scripts in rsyslog rules (RHBZ#2170038)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 0.1.69-1" date="1691150400">- Rebase to the latest upstream release (RHBZ#2221694)
- Make IPv6 related rules applicable only in case IPv6 is actually enabled. (RHBZ#2210276)
- update ANSSI BP-028 profiles to be aligned with version 2.0 (RHBZ#2155793)
- Correct URL used to download CVE checks. (RHBZ#2223817)</changelog>
</package>
<package pkgid="241bd171684341b50e9c96c94ee845e59205066c5b04b2da2966dcbd3589fbdb" name="scap-security-guide" arch="src">
  <version epoch="0" ver="0.1.72" rel="2.el7_9"/>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-4" date="1635854400">- Update RHEL7 DISA STIG profile to v3r5 (RHBZ#1996678)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-5" date="1645099200">- Update RHEL7 DISA STIG profile to v3r6 (RHBZ#2049532)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-6" date="1645790400">- Fix bash remediation of sudo_require_reauthentication (RHBZ#2049532)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.57-7" date="1651060800">- Add warning how to override audit buffer (RHBZ#1993822)
- Fix name of antivirus package in STIG profile (RHBZ#2066321)
- Update RHEL7 DISA STIG profile to v3r7 (RHBZ#2079217)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.57-8" date="1651579200">- Remove warning how to override audit buffer (RHBZ#1993822)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.63-1" date="1660046400">- Update to the latest upstream release (RHBZ#2116359)
- Fix SSH Key permissions (RHBZ#2021258)
- Remove PCI-DSS Benchmark(RHBZ2038165)
- Updated source of CVE data feed(RHBZ#2028432)
- Improved alignment with DISA's RHEL7 STIG(RHBZ#1967950)
- Update RHEL7 STIG profile to v3r8 (RHBZ#2112939)
- Add warning how to override audit buffer (RHBZ#1993822)
- Fix smartcard_auth rule for systems installed without authconfig (RHBZ#2116359)
- Fix check of enable_fips_mode on s390x (RHBZ#2116359)
- Fix applicability of pam_pkcs11 and grub2 rules on s390x (RHBZ#2116359)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.66-1" date="1676376000">- Rebase to a new upstream release 0.1.66 (RHBZ#2158410)
- Update RHEL7 STIG profile to V3R10 (RHBZ#2152657)
- Align file_permissions_sshd_private_key with DISA Benchmark (RHBZ#2123284)
- Fix remediation of audit watch rules (RHBZ#2123367)
- Fix check firewalld_sshd_port_enabled (RHBZ#2158410)
- Fix accepted control flags for pam_pwhistory (RHBZ#2158410)
- Unselect rule logind_session_timeout (RHBZ#2158410)
- Add support rainer scripts in rsyslog rules (RHBZ#2170038)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 0.1.69-1" date="1691150400">- Rebase to the latest upstream release (RHBZ#2221694)
- Make IPv6 related rules applicable only in case IPv6 is actually enabled. (RHBZ#2210276)
- update ANSSI BP-028 profiles to be aligned with version 2.0 (RHBZ#2155793)
- Correct URL used to download CVE checks. (RHBZ#2223817)</changelog>
  <changelog author="Marcus Burghardt &lt;maburgha@redhat.com&gt; - 0.1.72-1" date="1707912000">- Rebase to a new upstream release 0.1.72 (RHEL-25251)
- Include filter to dracut files in audit_rules_privileged_commands rule (RHEL-11938)</changelog>
  <changelog author="Marcus Burghardt &lt;maburgha@redhat.com&gt; - 0.1.72-2" date="1708084800">- Unlist profiles no longer maintained in RHEL8.</changelog>
</package>
<package pkgid="ab9ae51096b87a3c93d2255d1afb443faccf6a22de07ae85fc16695dadfd3a56" name="scap-security-guide" arch="src">
  <version epoch="0" ver="0.1.73" rel="1.el7_9"/>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-5" date="1645099200">- Update RHEL7 DISA STIG profile to v3r6 (RHBZ#2049532)</changelog>
  <changelog author="Gabriel Becker &lt;ggasparb@redhat.com&gt; - 0.1.57-6" date="1645790400">- Fix bash remediation of sudo_require_reauthentication (RHBZ#2049532)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.57-7" date="1651060800">- Add warning how to override audit buffer (RHBZ#1993822)
- Fix name of antivirus package in STIG profile (RHBZ#2066321)
- Update RHEL7 DISA STIG profile to v3r7 (RHBZ#2079217)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.57-8" date="1651579200">- Remove warning how to override audit buffer (RHBZ#1993822)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.63-1" date="1660046400">- Update to the latest upstream release (RHBZ#2116359)
- Fix SSH Key permissions (RHBZ#2021258)
- Remove PCI-DSS Benchmark(RHBZ2038165)
- Updated source of CVE data feed(RHBZ#2028432)
- Improved alignment with DISA's RHEL7 STIG(RHBZ#1967950)
- Update RHEL7 STIG profile to v3r8 (RHBZ#2112939)
- Add warning how to override audit buffer (RHBZ#1993822)
- Fix smartcard_auth rule for systems installed without authconfig (RHBZ#2116359)
- Fix check of enable_fips_mode on s390x (RHBZ#2116359)
- Fix applicability of pam_pkcs11 and grub2 rules on s390x (RHBZ#2116359)</changelog>
  <changelog author="Watson Sato &lt;wsato@redhat.com&gt; - 0.1.66-1" date="1676376000">- Rebase to a new upstream release 0.1.66 (RHBZ#2158410)
- Update RHEL7 STIG profile to V3R10 (RHBZ#2152657)
- Align file_permissions_sshd_private_key with DISA Benchmark (RHBZ#2123284)
- Fix remediation of audit watch rules (RHBZ#2123367)
- Fix check firewalld_sshd_port_enabled (RHBZ#2158410)
- Fix accepted control flags for pam_pwhistory (RHBZ#2158410)
- Unselect rule logind_session_timeout (RHBZ#2158410)
- Add support rainer scripts in rsyslog rules (RHBZ#2170038)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 0.1.69-1" date="1691150400">- Rebase to the latest upstream release (RHBZ#2221694)
- Make IPv6 related rules applicable only in case IPv6 is actually enabled. (RHBZ#2210276)
- update ANSSI BP-028 profiles to be aligned with version 2.0 (RHBZ#2155793)
- Correct URL used to download CVE checks. (RHBZ#2223817)</changelog>
  <changelog author="Marcus Burghardt &lt;maburgha@redhat.com&gt; - 0.1.72-1" date="1707912000">- Rebase to a new upstream release 0.1.72 (RHEL-25251)
- Include filter to dracut files in audit_rules_privileged_commands rule (RHEL-11938)</changelog>
  <changelog author="Marcus Burghardt &lt;maburgha@redhat.com&gt; - 0.1.72-2" date="1708084800">- Unlist profiles no longer maintained in RHEL8.</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 0.1.73-1" date="1716292800">- Rebase scap-security-guide package to version 0.1.73 (RHEL-36739)</changelog>
</package>
<package pkgid="20b7965f601fefa1537376a93da13019ef943fe3cb9bc18994b959dc6b910b29" name="screen" arch="src">
  <version epoch="0" ver="4.1.0" rel="0.27.20120314git3c2946.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.1.0-0.18.20120314git3c2946" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 4.1.0-0.19.20120314git3c2946" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Hracek &lt;phracek&gt; - 4.1.0-0.20.20120314git3c2946" date="1435579200">- Multiple packages are installing files under /etc/tmpfiles.d
- comply http://fedoraproject.org/wiki/Packaging:Guidelines#Tmpfiles.d
- Resolves: rhbz#1121958</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 4.1.0-0.21.20120314git3c2946" date="1435665600">- 'LoginName too long' with login name greater then 20 characters
- Resolves: #1119794</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 4.1.0-0.22.20120314git3c2946" date="1444910400">- cannot reattach to screen sessions (regression 'LoginName to long')
- Resolves: #1253697</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 4.1.0-0.23.20120314git3c2946" date="1452859200">- screen does not log successful authentication messages with STIG GEN003660 
- Resolves: #1196239</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 4.1.0-0.24.20120314git3c2946" date="1467288000">- Build has to be bigger then RHEL-7.2
- Related: #1196239</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 4.1.0-0.25.2012314git3c2946" date="1507118400">- Resolves: #1423036 - fix issue with coloring when using caption padding</changelog>
  <changelog author="V&#xE1;clav Dole&#x17E;al &lt;vdolezal@redhat.com&gt; - 4.1.0-0.26.2012314git3c2946" date="1580817600">- Resolves: #1791793 - backport Bracketed Past Mode support</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 4.1.0-0.27.2012314git3c2946" date="1613649600">- fix CVE-2021-26937 (#1927063)</changelog>
</package>
<package pkgid="bd3b9d0e134cb2b2e2879c831e9143634397be4b0b404054edb93ea5ebe1c18c" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="268.el7_9.2"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-261" date="1571054400">- Update sudo_role_template() to allow caller domain to read syslog pid files
Resolves: rhbz#1651253</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-262" date="1572004800">- Allow tmpreaper_t domain to read all domains state
Resolves: rhbz#1765063</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-263" date="1572436800">- Update tmpreaper_t policy due to fuser command
Resolves: rhbz#1765063</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-264" date="1572436801">- Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command
Resolves: rhbz#1765063</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-265" date="1572523200">- Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t
Resolves: rhbz#1765063</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-266" date="1573041600">- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1765063</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.13.1-267" date="1584964800">- Allow chronyd_t domain to exec shell
Resolves: rhbz#1775573
- Allow pmie daemon to send signal pcmd daemon
Resolves: rhbz#1770123
- Allow auditd poweroff or switch to single mode
Resolves: rhbz#1780332</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.13.1-268" date="1589284800">- Allow rhsmd read process state of all domains and kernel threads
Resolves: rhbz#1837461
- Allow ipa-adtrust-install restart sssd and dirsrv services
Resolves: rhbz#1820298
- Allow nagios_plugin_domain execute programs in bin directories
Resolves: rhbz#1824625
- selinux policy: add the right context for org.freeipa.server.trust-enable-agent
Related: rhbz#1820298</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.13.1-268.1" date="1599480000">- Allow ssh-keygen create file in /var/lib/glusterd
Resolves: rhbz#1867995</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 3.13.1-268.2" date="1603972800">- Allow certmonger add new entries in a generic certificates directory
Resolves: rhbz#1879496
- Allow slapd add new entries in ldap certificates directory
Resolves: rhbz#1879496
- Add miscfiles_add_entry_generic_cert_dirs() interface
Resolves: rhbz#1879496</changelog>
</package>
<package pkgid="f0567efe5e8620caef3f3f3953fc2994054036afa2837b52127cc9a1b91bbd58" name="skopeo" arch="src">
  <version epoch="1" ver="0.1.40" rel="12.el7_9"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:0.1.40-3" date="1579089600">- increment version to avoid dist tag clash with RHAOS</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:0.1.40-4" date="1579176000">- temporary disable s390x arch due to #1773504 causing fuse-overlayfs
  failing to build - skopeo/contaners-common requires it</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:0.1.40-5" date="1579521600">- Fix thread safety of gpgme (#1792243)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:0.1.40-6" date="1579867200">- resurrect s390x arch as kernel there now has the renameat2 syscall (#1773504)</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:0.1.40-7" date="1583150400">- fix "CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull"
- Resolves: #1806944</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:0.1.40-8" date="1583496000">- modify registries.conf default configuration to be more secure by default
- Resolves: #1810052</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 1:0.1.40-9" date="1584014400">- Resolves: #1812505 - revert registries.conf change</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:0.1.40-10" date="1584360000">- fix "CVE-2020-1702 skopeo: containers/image: Container images read entire image manifest into memory"
- Resolves: #1810613</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:0.1.40-11" date="1588161600">- synchronize reistries.conf accross all RHELs
- Related: #1810052</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:0.1.40-12" date="1599825600">- fix "CVE-2020-14040 skopeo: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-7]"
- Resolves: #1854716</changelog>
</package>
<package pkgid="c46f67aab244c1d8c988ddb0331d70bb5ff5659f3b841c83e78bdd35c84a0a92" name="slapi-nis" arch="src">
  <version epoch="0" ver="0.56.5" rel="3.el7_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-7" date="1509969600">- Related: #1473577
- Force at least SSSD 1.16.0-3 for timeout-enabled NSS API</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-8" date="1512734400">- Fixed: #1473572
- Changes of ID overrides now force clearing of affected SSSD cache entries on IPA master
- Related: #1473577
- Synchronize timeout-enabled code with ipa-extdom-extop</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-9" date="1544011200">- Fixed: #1502429
- Update upstream reference to http://pagure.io/slapi-nis/</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-10" date="1553688000">- Fixed: #1435663</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-11" date="1553688001">- Fixed: #1435663
  Additional set of fixes for conflicts over cn=config updates</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-12" date="1556020800">- Related: #1435663
  Covscan fixes</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-13" date="1565956800">- Fixed: #1725845
  ns-slapd is crashing intermittently
- Compiler fixes</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.5-1" date="1588593600">- Upstream release 0.56.5
- Resolves: rhbz#1820124 When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
- Resolves: rhbz#1820122 ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED
- Resolves: rhbz#1819018 ipa slapi-nis stack traces review request for LDAP server deadlock
- Resolves: rhbz#1830894 Memory leak during search of idview overrides</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.5-2" date="1588766400">- Initialize map lock in NIS plugin
- Resolves: rhbz#1832190</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.5-3" date="1611921600">- Fix memory leaks in ID views processing
- Resolves: rhbz#1866113</changelog>
</package>
<package pkgid="e815134817454c65bc7cdc8b86eec58b35f5b12acb714c3556987c64e7987288" name="slapi-nis" arch="src">
  <version epoch="0" ver="0.56.5" rel="4.el7_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-8" date="1512734400">- Fixed: #1473572
- Changes of ID overrides now force clearing of affected SSSD cache entries on IPA master
- Related: #1473577
- Synchronize timeout-enabled code with ipa-extdom-extop</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-9" date="1544011200">- Fixed: #1502429
- Update upstream reference to http://pagure.io/slapi-nis/</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-10" date="1553688000">- Fixed: #1435663</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-11" date="1553688001">- Fixed: #1435663
  Additional set of fixes for conflicts over cn=config updates</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-12" date="1556020800">- Related: #1435663
  Covscan fixes</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-13" date="1565956800">- Fixed: #1725845
  ns-slapd is crashing intermittently
- Compiler fixes</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.5-1" date="1588593600">- Upstream release 0.56.5
- Resolves: rhbz#1820124 When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
- Resolves: rhbz#1820122 ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED
- Resolves: rhbz#1819018 ipa slapi-nis stack traces review request for LDAP server deadlock
- Resolves: rhbz#1830894 Memory leak during search of idview overrides</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.5-2" date="1588766400">- Initialize map lock in NIS plugin
- Resolves: rhbz#1832190</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.5-3" date="1611921600">- Fix memory leaks in ID views processing
- Resolves: rhbz#1866113</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.5-4" date="1617796800">- CVE 2021-3480:  slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
- Resolves: rhbz#1942937</changelog>
</package>
<package pkgid="91b4487331db79a4418d34cf14cc2ff388b875be207bd079369fc1f92f8d6e3a" name="slapi-nis" arch="src">
  <version epoch="0" ver="0.60.0" rel="1.el7_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-9" date="1544011200">- Fixed: #1502429
- Update upstream reference to http://pagure.io/slapi-nis/</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-10" date="1553688000">- Fixed: #1435663</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-11" date="1553688001">- Fixed: #1435663
  Additional set of fixes for conflicts over cn=config updates</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-12" date="1556020800">- Related: #1435663
  Covscan fixes</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-13" date="1565956800">- Fixed: #1725845
  ns-slapd is crashing intermittently
- Compiler fixes</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.5-1" date="1588593600">- Upstream release 0.56.5
- Resolves: rhbz#1820124 When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
- Resolves: rhbz#1820122 ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED
- Resolves: rhbz#1819018 ipa slapi-nis stack traces review request for LDAP server deadlock
- Resolves: rhbz#1830894 Memory leak during search of idview overrides</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.5-2" date="1588766400">- Initialize map lock in NIS plugin
- Resolves: rhbz#1832190</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.5-3" date="1611921600">- Fix memory leaks in ID views processing
- Resolves: rhbz#1866113</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.5-4" date="1617796800">- CVE 2021-3480:  slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
- Resolves: rhbz#1942937</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.60.0-1" date="1662724800">- upstream release 0.60.0
- Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
- Resolves: rhbz#1978748
  Release adds following fixes:
  - Fix ID views integration
  - Fix base scope lookups
  - Bump NIS max dgram size to 8KB by default instead of 1KB
  - Allow to rebuild the compat tree</changelog>
</package>
<package pkgid="c3dfda0510bf3a977a4ce8596fc1fb32d3d4918feb548df6fd975ebd4213c53d" name="slapi-nis" arch="src">
  <version epoch="0" ver="0.60.0" rel="3.el7_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-11" date="1553688000">- Fixed: #1435663
  Additional set of fixes for conflicts over cn=config updates</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-12" date="1556020800">- Related: #1435663
  Covscan fixes</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-13" date="1565956800">- Fixed: #1725845
  ns-slapd is crashing intermittently
- Compiler fixes</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.5-1" date="1588593600">- Upstream release 0.56.5
- Resolves: rhbz#1820124 When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
- Resolves: rhbz#1820122 ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED
- Resolves: rhbz#1819018 ipa slapi-nis stack traces review request for LDAP server deadlock
- Resolves: rhbz#1830894 Memory leak during search of idview overrides</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.5-2" date="1588766400">- Initialize map lock in NIS plugin
- Resolves: rhbz#1832190</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.5-3" date="1611921600">- Fix memory leaks in ID views processing
- Resolves: rhbz#1866113</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.5-4" date="1617796800">- CVE 2021-3480:  slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
- Resolves: rhbz#1942937</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.60.0-1" date="1662724800">- upstream release 0.60.0
- Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
- Resolves: rhbz#1978748
  Release adds following fixes:
  - Fix ID views integration
  - Fix base scope lookups
  - Bump NIS max dgram size to 8KB by default instead of 1KB
  - Allow to rebuild the compat tree</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.60.0-2" date="1679486400">- Fix base DN searches outside the compat tree
- Resolves: rhbz#2168893</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.60.0-3" date="1682596800">- Also handle base searches within the compat tree
- Resolves: rhbz#2168893</changelog>
</package>
<package pkgid="a05ee0d501df93bdb87657a7c9aff566a4fef84b6c40ac162f6398931c2777b8" name="slapi-nis" arch="src">
  <version epoch="0" ver="0.60.0" rel="4.el7_9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-12" date="1556020800">- Related: #1435663
  Covscan fixes</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.0-13" date="1565956800">- Fixed: #1725845
  ns-slapd is crashing intermittently
- Compiler fixes</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.5-1" date="1588593600">- Upstream release 0.56.5
- Resolves: rhbz#1820124 When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
- Resolves: rhbz#1820122 ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED
- Resolves: rhbz#1819018 ipa slapi-nis stack traces review request for LDAP server deadlock
- Resolves: rhbz#1830894 Memory leak during search of idview overrides</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.5-2" date="1588766400">- Initialize map lock in NIS plugin
- Resolves: rhbz#1832190</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.5-3" date="1611921600">- Fix memory leaks in ID views processing
- Resolves: rhbz#1866113</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.56.5-4" date="1617796800">- CVE 2021-3480:  slapi-nis: NULL dereference (DoS) with specially crafted Binding DN
- Resolves: rhbz#1942937</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.60.0-1" date="1662724800">- upstream release 0.60.0
- Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
- Resolves: rhbz#1978748
  Release adds following fixes:
  - Fix ID views integration
  - Fix base scope lookups
  - Bump NIS max dgram size to 8KB by default instead of 1KB
  - Allow to rebuild the compat tree</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.60.0-2" date="1679486400">- Fix base DN searches outside the compat tree
- Resolves: rhbz#2168893</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.60.0-3" date="1682596800">- Also handle base searches within the compat tree
- Resolves: rhbz#2168893</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 0.60.0-4" date="1698148800">- Ignore updates from non-tracked subtrees during modify/modrdn/update
  to avoid deadlocks with retro changelog
- Resolves: RHEL-11869</changelog>
</package>
<package pkgid="251a0953ff54211d48f738e8939e977743d5a8580aa4c267e2a97373845b27e2" name="spice" arch="src">
  <version epoch="0" ver="0.14.0" rel="9.el7_9.1"/>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-1" date="1507723200">- Rebase to 0.14.0 release
  Resolves: rhbz#1472948</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2" date="1507809600">- Add streaming patches for use with spice-streaming-agent
  Related: rhbz#1478356</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-3" date="1522756800">- Disable TLSv1.0
  Resolves: rhbz#1521053</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-4" date="1524830400">- Revert back to spice 0.12 behaviour where QXL guest resources for cursor
  commands are only released when the current cursor is replaced. This avoids
  a QEMU regression causing crashes during migration
  Resolves: rhbz#1567944</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-5" date="1529496000">- Don't mute Record channel on client reconnection
  Resolves: rhbz#1549132
- Allow to configure TLS protocol versions and ciphers which SPICE will use for
  TLS communications
  Resolves: rhbz#1562213
- Enable ECDH ciphers with OpenSSL 1.0
  Resolves: rhbz#1566597</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.14.0-6" date="1533816000">- Fix flexible array buffer overflow
  Resolves: rhbz#1596008</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-7" date="1545134400">- Fix off-by-one error during guest-to-host memory address conversion
  Resolves: CVE-2019-3813
- Add patch for upstream commit 48179332d9da0. This should help with corrupted
  spice-html5 displays
  Resolves: rhbz#1573739
- Add missing minimum openssl version Requires for patch #24
  Resolves: rhbz#1627693</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.14.0-8" date="1561032000">- Avoid potential crash from buggy guest driver
  Resolves: rhbz#1582137</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.14.0-9" date="1575460800">- Always enable latency monitor to keep tcp connection alive
  Resolves: rhbz#1719736</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.14.0-9.1" date="1599048000">- Fix multiple buffer overflows in QUIC decoding code
  Resolves: CVE-2020-14355</changelog>
</package>
<package pkgid="e2b5396a2cccc05d84d67de696f36bc6011061cc2dc64965b58109160bc59707" name="spice-gtk" arch="src">
  <version epoch="0" ver="0.35" rel="5.el7_9.1"/>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.35-1" date="1528718400">- Rebase to 0.35
  Resolves: rhbz#1562126</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.35-2" date="1533902400">- Fix flexible array buffer overflow
  Resolves: rhbz#1596008</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.35-3" date="1539172800">- Fix insufficient encoding checks for LZ
  Resolves: rhbz#1598652</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.35-4" date="1552651200">- Fix bad channel-reset on usbredir
  Resolves: rhbz#1625550</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.35-5" date="1571140800">- Keepalive fix
  Resolves: rhbz#1719736
- Fix hang on migration after password expired
  Resolves: rhbz#1761776</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.35-5.1" date="1599048000">- Fix multiple buffer overflows in QUIC decoding code
  Resolves: CVE-2020-14355</changelog>
</package>
<package pkgid="e07019f7f478b4ccc339e70c01c1095fdf5220628e8917df078ddeaa0d9792a1" name="springdale-virtualization" arch="src">
  <version epoch="0" ver="7" rel="2.sdl7.1"/>
  <changelog author="Josko Plazonic &lt;plazonic@math.princeton.edu&gt;" date="1174910400">- first build</changelog>
  <changelog author="Josko Plazonic &lt;plazonic@math.princeton.edu&gt;" date="1184673600">- variant for unsupported repo</changelog>
  <changelog author="Josko Plazonic &lt;plazonic@math.princeton.edu&gt;" date="1289908800">- initial build for PUIAS 6</changelog>
  <changelog author="Thomas Uphill &lt;uphill@ias.edu&gt;" date="1291032000">- adding mirrorlist for all repos</changelog>
  <changelog author="Thomas Uphill &lt;uphill@ias.edu&gt;" date="1333022400">- rewriting the if statements to make it more readable.
- adding buildsys</changelog>
  <changelog author="Josko Plazonic &lt;plazonic@math.princeton.edu&gt;" date="1361793600">- move to springdale</changelog>
  <changelog author="Josko Plazonic &lt;plazonic@princeton.edu&gt;" date="1401192000">- change repoid of debuginfo repos which will make yum-utils happy</changelog>
  <changelog author="Josko Plazonic &lt;plazonic@princeton.edu&gt;" date="1403870400">- initial version for sdl7</changelog>
  <changelog author="Josko Plazonic &lt;plazonic@princeton.edu&gt;" date="1404302400">- rename repos for easier updates handling</changelog>
  <changelog author="Josko Plazonic &lt;plazonic@princeton.edu&gt;" date="1404907200">- handle also addons and other repos</changelog>
</package>
<package pkgid="9d441e431547699bc3528d69b353d465b959413d9adacb49d9962b75b1860e90" name="squid" arch="src">
  <version epoch="7" ver="3.5.20" rel="17.el7_9.10"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-16" date="1585310400">- Resolves: #1738582 - CVE-2019-12525 squid: parsing of header 
  Proxy-Authentication leads to memory corruption</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17" date="1588075200">- Resolves: #1828361 - CVE-2020-11945 squid: improper access restriction upon
  Digest Authentication nonce replay could lead to remote code execution
- Resolves: #1828362 - CVE-2019-12519 squid: improper check for new member in
  ESIExpression::Evaluate allows for stack buffer overflow [rhel</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.2" date="1596196800">- Resolves: #1802516 - CVE-2020-8449 squid: Improper input validation issues
  in HTTP Request processing
- Resolves: #1802515 - CVE-2020-8450 squid: Buffer overflow in a Squid acting
  as reverse-proxy
- Resolves: #1853129 - CVE-2020-15049 squid: request smuggling and poisoning
  attack against the HTTP cache
- Resolves: #1802517 - CVE-2019-12528 squid: Information Disclosure issue in
  FTP Gateway</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.4" date="1598616000">- Resolves: #1872349 - CVE-2020-24606 squid: Improper Input Validation could
  result in a DoS
- Resolves: #1872327 - CVE-2020-15810 squid: HTTP Request Smuggling could
  result in cache poisoning
- Resolves: #1872342 - CVE-2020-15811 squid: HTTP Request Splitting could
  result in cache poisoning</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.5" date="1603713600">- Resolves: #1890581 - Fix for CVE 2019-13345 breaks authentication in
  cachemgr.cgi</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.6" date="1617192000">- Resolves: #1944256 - CVE-2020-25097 squid: improper input validation may allow
  a trusted client to perform HTTP Request Smuggling</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.7" date="1656417600">- Resolves: #2100778 - CVE-2021-46784 squid: DoS when processing gopher server
  responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.8" date="1664366400">- Resolves: #2130254 - CVE-2022-41318 squid: buffer-over-read in SSPI and SMB
  authentication</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 7:3.5.20-17.9" date="1698840000">- Resolves: RHEL-14789 - squid: Denial of Service in HTTP Digest Authentication
  (CVE-2023-46847)</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 7:3.5.20-17.10" date="1707220800">- Resolves: RHEL-16779 - squid: NULL pointer dereference in the gopher protocol
  code -- Remove support for Gopher protocol (CVE-2023-46728)
- Resolves: RHEL-18176 - squid: Buffer over-read in the HTTP Message processing
  feature (CVE-2023-49285)
- Resolves: RHEL-18171 - squid: Incorrect Check of Function Return Value In
  Helper Process management (CVE-2023-49286)
- Resolves: RHEL-16758 - squid: Denial of Service in SSL Certificate validation
  (CVE-2023-46724)
- Resolves: RHEL-19557 - squid: denial of service in HTTP request parsing
  (CVE-2023-50269)
- Resolves: RHEL-26082 - squid: denial of service in HTTP header parser
  (CVE-2024-25617)</changelog>
</package>
<package pkgid="27633b8597329206594670ff56aa93a44f420432f729bf05a39dce92e099bfdc" name="squid" arch="src">
  <version epoch="7" ver="3.5.20" rel="17.el7_9.5"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-10" date="1493121600">- Resolves: #1445219 - [RFE] Add rock cache directive to squid</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-11" date="1506945600">- Resolves: #1452200 - Include kerberos_ldap_group helper in squid</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-12" date="1506945601">- Resolves: #1471140 - Missing detailed configuration file</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-13" date="1544097600">- Resolves: #1620546 - migration of upstream squid</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-15" date="1564056000">- Resolves: #1690551 - Squid cache_peer DNS lookup failed when not all lower
  case
- Resolves: #1680022 - squid can't display download/upload packet size for HTTPS
  sites
- Resolves: #1717430 - Excessive memory usage when running out of descriptors
- Resolves: #1676420 - Cache siblings return wrongly cached gateway timeouts
- Resolves: #1729435 - CVE-2019-13345 squid: XSS via user_name or auth parameter
  in cachemgr.cgi
- Resolves: #1582301 - CVE-2018-1000024 CVE-2018-1000027 squid: various flaws</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-16" date="1585310400">- Resolves: #1738582 - CVE-2019-12525 squid: parsing of header 
  Proxy-Authentication leads to memory corruption</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17" date="1588075200">- Resolves: #1828361 - CVE-2020-11945 squid: improper access restriction upon
  Digest Authentication nonce replay could lead to remote code execution
- Resolves: #1828362 - CVE-2019-12519 squid: improper check for new member in
  ESIExpression::Evaluate allows for stack buffer overflow [rhel</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.2" date="1596196800">- Resolves: #1802516 - CVE-2020-8449 squid: Improper input validation issues
  in HTTP Request processing
- Resolves: #1802515 - CVE-2020-8450 squid: Buffer overflow in a Squid acting
  as reverse-proxy
- Resolves: #1853129 - CVE-2020-15049 squid: request smuggling and poisoning
  attack against the HTTP cache
- Resolves: #1802517 - CVE-2019-12528 squid: Information Disclosure issue in
  FTP Gateway</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.4" date="1598616000">- Resolves: #1872349 - CVE-2020-24606 squid: Improper Input Validation could
  result in a DoS
- Resolves: #1872327 - CVE-2020-15810 squid: HTTP Request Smuggling could
  result in cache poisoning
- Resolves: #1872342 - CVE-2020-15811 squid: HTTP Request Splitting could
  result in cache poisoning</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.5" date="1603713600">- Resolves: #1890581 - Fix for CVE 2019-13345 breaks authentication in
  cachemgr.cgi</changelog>
</package>
<package pkgid="c9bd20642b9d3a8426e3d24d84a0a293d10e8a8bb09393cbcc7854ad77fe7ba6" name="squid" arch="src">
  <version epoch="7" ver="3.5.20" rel="17.el7_9.6"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-11" date="1506945600">- Resolves: #1452200 - Include kerberos_ldap_group helper in squid</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-12" date="1506945601">- Resolves: #1471140 - Missing detailed configuration file</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-13" date="1544097600">- Resolves: #1620546 - migration of upstream squid</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-15" date="1564056000">- Resolves: #1690551 - Squid cache_peer DNS lookup failed when not all lower
  case
- Resolves: #1680022 - squid can't display download/upload packet size for HTTPS
  sites
- Resolves: #1717430 - Excessive memory usage when running out of descriptors
- Resolves: #1676420 - Cache siblings return wrongly cached gateway timeouts
- Resolves: #1729435 - CVE-2019-13345 squid: XSS via user_name or auth parameter
  in cachemgr.cgi
- Resolves: #1582301 - CVE-2018-1000024 CVE-2018-1000027 squid: various flaws</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-16" date="1585310400">- Resolves: #1738582 - CVE-2019-12525 squid: parsing of header 
  Proxy-Authentication leads to memory corruption</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17" date="1588075200">- Resolves: #1828361 - CVE-2020-11945 squid: improper access restriction upon
  Digest Authentication nonce replay could lead to remote code execution
- Resolves: #1828362 - CVE-2019-12519 squid: improper check for new member in
  ESIExpression::Evaluate allows for stack buffer overflow [rhel</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.2" date="1596196800">- Resolves: #1802516 - CVE-2020-8449 squid: Improper input validation issues
  in HTTP Request processing
- Resolves: #1802515 - CVE-2020-8450 squid: Buffer overflow in a Squid acting
  as reverse-proxy
- Resolves: #1853129 - CVE-2020-15049 squid: request smuggling and poisoning
  attack against the HTTP cache
- Resolves: #1802517 - CVE-2019-12528 squid: Information Disclosure issue in
  FTP Gateway</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.4" date="1598616000">- Resolves: #1872349 - CVE-2020-24606 squid: Improper Input Validation could
  result in a DoS
- Resolves: #1872327 - CVE-2020-15810 squid: HTTP Request Smuggling could
  result in cache poisoning
- Resolves: #1872342 - CVE-2020-15811 squid: HTTP Request Splitting could
  result in cache poisoning</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.5" date="1603713600">- Resolves: #1890581 - Fix for CVE 2019-13345 breaks authentication in
  cachemgr.cgi</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.6" date="1617192000">- Resolves: #1944256 - CVE-2020-25097 squid: improper input validation may allow
  a trusted client to perform HTTP Request Smuggling</changelog>
</package>
<package pkgid="14d17011385aedc6ed2837be1265d447b97141e4f6fca50b87322a893c457e94" name="squid" arch="src">
  <version epoch="7" ver="3.5.20" rel="17.el7_9.7"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-12" date="1506945600">- Resolves: #1471140 - Missing detailed configuration file</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-13" date="1544097600">- Resolves: #1620546 - migration of upstream squid</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-15" date="1564056000">- Resolves: #1690551 - Squid cache_peer DNS lookup failed when not all lower
  case
- Resolves: #1680022 - squid can't display download/upload packet size for HTTPS
  sites
- Resolves: #1717430 - Excessive memory usage when running out of descriptors
- Resolves: #1676420 - Cache siblings return wrongly cached gateway timeouts
- Resolves: #1729435 - CVE-2019-13345 squid: XSS via user_name or auth parameter
  in cachemgr.cgi
- Resolves: #1582301 - CVE-2018-1000024 CVE-2018-1000027 squid: various flaws</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-16" date="1585310400">- Resolves: #1738582 - CVE-2019-12525 squid: parsing of header 
  Proxy-Authentication leads to memory corruption</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17" date="1588075200">- Resolves: #1828361 - CVE-2020-11945 squid: improper access restriction upon
  Digest Authentication nonce replay could lead to remote code execution
- Resolves: #1828362 - CVE-2019-12519 squid: improper check for new member in
  ESIExpression::Evaluate allows for stack buffer overflow [rhel</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.2" date="1596196800">- Resolves: #1802516 - CVE-2020-8449 squid: Improper input validation issues
  in HTTP Request processing
- Resolves: #1802515 - CVE-2020-8450 squid: Buffer overflow in a Squid acting
  as reverse-proxy
- Resolves: #1853129 - CVE-2020-15049 squid: request smuggling and poisoning
  attack against the HTTP cache
- Resolves: #1802517 - CVE-2019-12528 squid: Information Disclosure issue in
  FTP Gateway</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.4" date="1598616000">- Resolves: #1872349 - CVE-2020-24606 squid: Improper Input Validation could
  result in a DoS
- Resolves: #1872327 - CVE-2020-15810 squid: HTTP Request Smuggling could
  result in cache poisoning
- Resolves: #1872342 - CVE-2020-15811 squid: HTTP Request Splitting could
  result in cache poisoning</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.5" date="1603713600">- Resolves: #1890581 - Fix for CVE 2019-13345 breaks authentication in
  cachemgr.cgi</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.6" date="1617192000">- Resolves: #1944256 - CVE-2020-25097 squid: improper input validation may allow
  a trusted client to perform HTTP Request Smuggling</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.7" date="1656417600">- Resolves: #2100778 - CVE-2021-46784 squid: DoS when processing gopher server
  responses</changelog>
</package>
<package pkgid="e258e0a65235e9b6237a7b729ddd0cc53080738575279a01cf238dac565ce885" name="squid" arch="src">
  <version epoch="7" ver="3.5.20" rel="17.el7_9.8"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-13" date="1544097600">- Resolves: #1620546 - migration of upstream squid</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-15" date="1564056000">- Resolves: #1690551 - Squid cache_peer DNS lookup failed when not all lower
  case
- Resolves: #1680022 - squid can't display download/upload packet size for HTTPS
  sites
- Resolves: #1717430 - Excessive memory usage when running out of descriptors
- Resolves: #1676420 - Cache siblings return wrongly cached gateway timeouts
- Resolves: #1729435 - CVE-2019-13345 squid: XSS via user_name or auth parameter
  in cachemgr.cgi
- Resolves: #1582301 - CVE-2018-1000024 CVE-2018-1000027 squid: various flaws</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-16" date="1585310400">- Resolves: #1738582 - CVE-2019-12525 squid: parsing of header 
  Proxy-Authentication leads to memory corruption</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17" date="1588075200">- Resolves: #1828361 - CVE-2020-11945 squid: improper access restriction upon
  Digest Authentication nonce replay could lead to remote code execution
- Resolves: #1828362 - CVE-2019-12519 squid: improper check for new member in
  ESIExpression::Evaluate allows for stack buffer overflow [rhel</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.2" date="1596196800">- Resolves: #1802516 - CVE-2020-8449 squid: Improper input validation issues
  in HTTP Request processing
- Resolves: #1802515 - CVE-2020-8450 squid: Buffer overflow in a Squid acting
  as reverse-proxy
- Resolves: #1853129 - CVE-2020-15049 squid: request smuggling and poisoning
  attack against the HTTP cache
- Resolves: #1802517 - CVE-2019-12528 squid: Information Disclosure issue in
  FTP Gateway</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.4" date="1598616000">- Resolves: #1872349 - CVE-2020-24606 squid: Improper Input Validation could
  result in a DoS
- Resolves: #1872327 - CVE-2020-15810 squid: HTTP Request Smuggling could
  result in cache poisoning
- Resolves: #1872342 - CVE-2020-15811 squid: HTTP Request Splitting could
  result in cache poisoning</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.5" date="1603713600">- Resolves: #1890581 - Fix for CVE 2019-13345 breaks authentication in
  cachemgr.cgi</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.6" date="1617192000">- Resolves: #1944256 - CVE-2020-25097 squid: improper input validation may allow
  a trusted client to perform HTTP Request Smuggling</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.7" date="1656417600">- Resolves: #2100778 - CVE-2021-46784 squid: DoS when processing gopher server
  responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.8" date="1664366400">- Resolves: #2130254 - CVE-2022-41318 squid: buffer-over-read in SSPI and SMB
  authentication</changelog>
</package>
<package pkgid="8656fe19fbf32b2bbb8da4fb64e607db3a17ba132bc8a90464f23d73c45446fc" name="squid" arch="src">
  <version epoch="7" ver="3.5.20" rel="17.el7_9.9"/>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-15" date="1564056000">- Resolves: #1690551 - Squid cache_peer DNS lookup failed when not all lower
  case
- Resolves: #1680022 - squid can't display download/upload packet size for HTTPS
  sites
- Resolves: #1717430 - Excessive memory usage when running out of descriptors
- Resolves: #1676420 - Cache siblings return wrongly cached gateway timeouts
- Resolves: #1729435 - CVE-2019-13345 squid: XSS via user_name or auth parameter
  in cachemgr.cgi
- Resolves: #1582301 - CVE-2018-1000024 CVE-2018-1000027 squid: various flaws</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-16" date="1585310400">- Resolves: #1738582 - CVE-2019-12525 squid: parsing of header 
  Proxy-Authentication leads to memory corruption</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17" date="1588075200">- Resolves: #1828361 - CVE-2020-11945 squid: improper access restriction upon
  Digest Authentication nonce replay could lead to remote code execution
- Resolves: #1828362 - CVE-2019-12519 squid: improper check for new member in
  ESIExpression::Evaluate allows for stack buffer overflow [rhel</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.2" date="1596196800">- Resolves: #1802516 - CVE-2020-8449 squid: Improper input validation issues
  in HTTP Request processing
- Resolves: #1802515 - CVE-2020-8450 squid: Buffer overflow in a Squid acting
  as reverse-proxy
- Resolves: #1853129 - CVE-2020-15049 squid: request smuggling and poisoning
  attack against the HTTP cache
- Resolves: #1802517 - CVE-2019-12528 squid: Information Disclosure issue in
  FTP Gateway</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.4" date="1598616000">- Resolves: #1872349 - CVE-2020-24606 squid: Improper Input Validation could
  result in a DoS
- Resolves: #1872327 - CVE-2020-15810 squid: HTTP Request Smuggling could
  result in cache poisoning
- Resolves: #1872342 - CVE-2020-15811 squid: HTTP Request Splitting could
  result in cache poisoning</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.5" date="1603713600">- Resolves: #1890581 - Fix for CVE 2019-13345 breaks authentication in
  cachemgr.cgi</changelog>
  <changelog author="Lubos Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.6" date="1617192000">- Resolves: #1944256 - CVE-2020-25097 squid: improper input validation may allow
  a trusted client to perform HTTP Request Smuggling</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.7" date="1656417600">- Resolves: #2100778 - CVE-2021-46784 squid: DoS when processing gopher server
  responses</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 7:3.5.20-17.8" date="1664366400">- Resolves: #2130254 - CVE-2022-41318 squid: buffer-over-read in SSPI and SMB
  authentication</changelog>
  <changelog author="Stepan Broz &lt;sbroz@redhat.com&gt; - 7:3.5.20-17.9" date="1698840000">- Resolves: RHEL-14789 - squid: Denial of Service in HTTP Digest Authentication
  (CVE-2023-46847)</changelog>
</package>
<package pkgid="47c6f8d8b5eee25d2d3722ba219cbaead4f16ada7dae7a6de5a30062e27d505d" name="sssd" arch="src">
  <version epoch="0" ver="1.16.5" rel="10.el7"/>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-1" date="1584705600">- Resolves: rhbz#1796352 - Rebase SSSD for RHEL 7.9</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-2" date="1587643200">- Resolves: rhbz#1513371 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_be[PROXY] killed by 6
- Resolves: rhbz#1568083 - subdomain lookup fails when certmaprule contains DN
- Resolves: rhbz#1781539 - PKINIT with KCM does not work
- Resolves: rhbz#1786341 - SSSD doesn't honour the customized ID view created in IPA
- Resolves: rhbz#1709818 - override_gid did not work for subdomain.
- Resolves: rhbz#1719718 - Validator warning issue : Attribute 'dns_resolver_op_timeout' is not allowed in section 'domain/REMOVED'. Check for typos
- Resolves: rhbz#1787067 - sssd (sssd_be) is consuming 100 CPU, partially due to failing mem-cache
- Resolves: rhbz#1822461 - background refresh task does not refresh updated netgroup entries
- Added missing 'Requires' to resolves some of rpmdiff tool warnings</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-3" date="1588852800">- Resolves: rhbz#1683946 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working setup</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-4" date="1589198400">- Resolves: rhbz#1829806 - [Bug] Reduce logging about flat names
- Resolves: rhbz#1800564 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-5" date="1589889600">- Resolves: rhbz#1834266 - "off-by-one error" in watchdog implementation</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-6" date="1589976000">- Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
- Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;Alexey Tikhonov&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
</package>
<package pkgid="0cbc90389c480c6e11b9f851407cc911a4b367fa9c799625aea684617361d9b5" name="sssd" arch="src">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.10"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
</package>
<package pkgid="25af1b95e62fac4190bfdf533bb60d2e16a5e0ac43373e02a69e3fb02aab0d3e" name="sssd" arch="src">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.11"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
</package>
<package pkgid="4f60b3e9fda765399833fe7eb864b1baa7ba668a49272ae2b2f43ab4c71b5e46" name="sssd" arch="src">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.12"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
</package>
<package pkgid="7cb5727656f21e7558ed0a6895658f865ca290f6ebc166c1713de47b3b1e0e84" name="sssd" arch="src">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.13"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
</package>
<package pkgid="306d7472198a6c4eb4232848ca7696ea8f71fd6c281151eaba0571eeb6c17eaa" name="sssd" arch="src">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.14"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
</package>
<package pkgid="4af8c3fd5c46d8e3670fc3ed0ec332601b8a9c2bdab371c57e7a6044b9d66c5a" name="sssd" arch="src">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.15"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
</package>
<package pkgid="cbd50d906bf78d18e33c743bc08d6c25094452360ffc0add96b3a40520229ba9" name="sssd" arch="src">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.16"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.9" date="1628510400">- Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
- Resolves: rhbz#1968330 - id lookup is failing intermittently
- Resolves: rhbz#1964415 - Memory leak in the simple access provider
- Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.10" date="1628683200">- Resolves: rhbz#1973796 - SSSD is NOT able to contact the Global Catalog when local site is down</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.11" date="1635854400">- Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
- Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
- Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.12" date="1643630400">- Resolves: rhbz#2006382 - IPA Intermittence fetching groups
- Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
- Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
- Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.13" date="1654862400">- Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
- Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.14" date="1668513600">- Resolves: rhbz#2097014 - SSSD -&gt; sssd_be and sssd_ifp coredump [rhel-7.9.z]
- Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
- Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.15" date="1673006400">- Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
- Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]</changelog>
  <changelog author="Eduardo Lima (Etrunko) &lt;etrunko@redhat.com&gt; 1.16.5-10.16" date="1700136000">- Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]</changelog>
</package>
<package pkgid="2da85d16aaefff8b6a640ffcf6e7d42ee9e83eb9e3e21f75fe4746a79244d2d6" name="sssd" arch="src">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.6"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-7" date="1590062400">- Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
- Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
</package>
<package pkgid="2259cc8b664437db99b0f7ca180ea02e6c03ec8fe4114d4de4c490bf72babdbe" name="sssd" arch="src">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.7"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-8" date="1590580800">- Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
- Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                           It is done in two steps (two different nsupdate messages).</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
</package>
<package pkgid="e18e09e44ea0ad5536c4fd1ee5e5cddccb2ffa180e42f208502d6732a0226227" name="sssd" arch="src">
  <version epoch="0" ver="1.16.5" rel="10.el7_9.8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-9" date="1590753600">- Resolves: rhbz#1796873 - [sssd] RHEL 7.9 Tier 0 Localization</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10" date="1591358400">- Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
- Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
- Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
- Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.1" date="1597752000">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.2" date="1597752001">- Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.3" date="1597838400">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete)</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.4" date="1598616000">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.5" date="1598616001">- Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  (Previous attempt to fix this issue was incomplete (again))
- just bumping the version to build for proper target</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.6" date="1606305600">- Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
- Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
- Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
- Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
- Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
- Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
- Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
- Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.7" date="1607601600">- Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
- Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
- Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; 1.16.5-10.8" date="1619438400">- Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
- Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
- Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
- Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
- Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]</changelog>
</package>
<package pkgid="9825d5fd8ba21c8f5703072e1cfa63ec5ffa3ce277e7fc76b46e66fea1c4d488" name="strace" arch="src">
  <version epoch="0" ver="4.24" rel="7.el7_9"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4.12-7" date="1525089600">- Return non-zero exit code if no processes have been attached. (#1573034)</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4.12-8" date="1532001600">- Update membarrier constants. (#1600210)</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4.12-9" date="1532174400">- Patch files in tests-m32 and tests-mx32 as well. (#1600210)</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4.24-1" date="1564660800">- Rebase to strace 4.24. (#1659983)
- Enable stack unwinding (-k option). (#1655856)</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4.24-2" date="1567080000">- Copy over changes in tests/ioctl_evdev-success.c (from cdd8206a
  "tests: test evdev bitset decoding more thoroughly")
  to tests-m32/ioctl_evdev-success.c and tests-mx32/ioctl_evdev-success.c
- Copy over changes in tests/ioctl_evdev.c (from 5ee385e2
  "evdev: fix decoding of EVIOCGBIT(0, ...)") to tests-m32/ioctl_evdev.c
  and tests-mx32/ioctl_evdev.c
- Resolves: #1746478</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4.24-3" date="1567166400">- Include commit v4.26~65 "s390x: beautify sthyi data tail prints"
- Resolves: #1747475</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4.24-4" date="1567166401">- Include upstream patches that fix issues reported by covscan:
  91281fec "v4l2: avoid shifting left a signed number by 31 bit",
  522ad3a0 "syscall.c: avoid infinite loop in subcalls parsing", and
  9446038e "kvm: avoid bogus vcpu_info assignment in vcpu_register".
- Resolves: #1747524</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4.24-5" date="1587038400">- Fix printing stack traces for early syscalls on process attach (#1790052):
  69b2c33a "unwind-libdw: fix initialization of libdwfl cache" and
  8e515c74 "tests: add strace-k-p test".
- Add commit v5.4~97 "xlat: use unsgined type for mount_flags fallback values"
  (A leftover for #1747524).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4.24-6" date="1587038401">- Fix expected alignment for IPC tests (#1795261):
  4377e3a1 "tests: fix expected output for some ipc tests", and
  a75c7c4b "tests: fix -a argument in ipc_msgbuf-Xraw test".</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4.24-7" date="1641384000">- Fix incorrect ifname printing buffer size (#2028146):
  e27b0677 "print_ifindex: fix IFNAME_QUOTED_SZ definition".</changelog>
</package>
<package pkgid="a937dc3409bf1d5a1cc517364cae270401b45d7fb7994b94e43419e2ff835797" name="sudo" arch="src">
  <version epoch="0" ver="1.8.23" rel="10.el7_9.1"/>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-2" date="1537531200">- RHEL-7.6 erratum
  Resolves: rhbz#1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
  Resolves: rhbz#1506025 - Latest update broke sudo for ldap users.
  Resolves: rhbz#1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-3" date="1537790400">- RHEL-7.6 erratum
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.23-4" date="1550664000">- RHEL-7.7 erratum
  Resolves: rhbz#1672876 - Backporting sudo bug with expired passwords
  Resolves: rhbz#1665285 - Problem with sudo-1.8.23 and 'who am i'</changelog>
  <changelog author="Marek Tamaskovic &lt;mtamasko@redhat.com&gt; 1.8.23-5" date="1565611200">- RHEL-7.8 erratum
  Resolves: rhbz#1711997 sudo is super slow when /etc/security/limits.conf contains many entries</changelog>
  <changelog author="Marek Tamaskovic &lt;mtamasko@redhat.com&gt; 1.8.23-6" date="1566216000">- RHEL-7.8 erratum
  Resolves: rhbz#1647678 sudo access denied with pam_access and pts terminal configurations</changelog>
  <changelog author="Marek Tamaskovic &lt;mtamasko@redhat.com&gt; 1.8.23-7" date="1566475200">- RHEL-7.8 erratum
  Resolves: rhbz#1738841 Crash in do_syslog() while doing sudoedit</changelog>
  <changelog author="Marek Tamaskovic &lt;mtamasko@redhat.com&gt; 1.8.23-8" date="1571313600">- RHEL-7.8
- fixed CVE-2019-14287
  Resolves: rhbz#1760695</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.23-9" date="1580904000">- RHEL-7.8
- CVE-2019-18634
  Resolves: rhbz#1798095</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.23-10" date="1585137600">- RHEL-7.9
- sudo allows privilege escalation with expire password
  Resolves: rhbz#1788196</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.23-10.1" date="1611144000">- RHEL 7.9.Z ERRATUM
- CVE-2021-3156
Resolves: rhbz#1917729</changelog>
</package>
<package pkgid="7c60fb39de8c2c3269b0ae1886d9d8d198e6d6c0c00eb98e5b8afe365cfbca6e" name="sudo" arch="src">
  <version epoch="0" ver="1.8.23" rel="10.el7_9.2"/>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; 1.8.23-3" date="1537790400">- RHEL-7.6 erratum
  Resolves: rhbz#1547974 - Rebase sudo to latest stable upstream version</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.23-4" date="1550664000">- RHEL-7.7 erratum
  Resolves: rhbz#1672876 - Backporting sudo bug with expired passwords
  Resolves: rhbz#1665285 - Problem with sudo-1.8.23 and 'who am i'</changelog>
  <changelog author="Marek Tamaskovic &lt;mtamasko@redhat.com&gt; 1.8.23-5" date="1565611200">- RHEL-7.8 erratum
  Resolves: rhbz#1711997 sudo is super slow when /etc/security/limits.conf contains many entries</changelog>
  <changelog author="Marek Tamaskovic &lt;mtamasko@redhat.com&gt; 1.8.23-6" date="1566216000">- RHEL-7.8 erratum
  Resolves: rhbz#1647678 sudo access denied with pam_access and pts terminal configurations</changelog>
  <changelog author="Marek Tamaskovic &lt;mtamasko@redhat.com&gt; 1.8.23-7" date="1566475200">- RHEL-7.8 erratum
  Resolves: rhbz#1738841 Crash in do_syslog() while doing sudoedit</changelog>
  <changelog author="Marek Tamaskovic &lt;mtamasko@redhat.com&gt; 1.8.23-8" date="1571313600">- RHEL-7.8
- fixed CVE-2019-14287
  Resolves: rhbz#1760695</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.23-9" date="1580904000">- RHEL-7.8
- CVE-2019-18634
  Resolves: rhbz#1798095</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.23-10" date="1585137600">- RHEL-7.9
- sudo allows privilege escalation with expire password
  Resolves: rhbz#1788196</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.23-10.1" date="1611144000">- RHEL 7.9.Z ERRATUM
- CVE-2021-3156
Resolves: rhbz#1917729</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.23-10.2" date="1625832000">- RHEL 7.9.Z ERRATUM
- defaults use_pty plus SELinux ROLE in user specification breaks terminal
  Resolves: rhbz#1972820</changelog>
</package>
<package pkgid="37e486a0d817c77ff2e06b801076acca96434afb23d3051b8ce9e0644126f2f1" name="sudo" arch="src">
  <version epoch="0" ver="1.8.23" rel="10.el7_9.3"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.23-4" date="1550664000">- RHEL-7.7 erratum
  Resolves: rhbz#1672876 - Backporting sudo bug with expired passwords
  Resolves: rhbz#1665285 - Problem with sudo-1.8.23 and 'who am i'</changelog>
  <changelog author="Marek Tamaskovic &lt;mtamasko@redhat.com&gt; 1.8.23-5" date="1565611200">- RHEL-7.8 erratum
  Resolves: rhbz#1711997 sudo is super slow when /etc/security/limits.conf contains many entries</changelog>
  <changelog author="Marek Tamaskovic &lt;mtamasko@redhat.com&gt; 1.8.23-6" date="1566216000">- RHEL-7.8 erratum
  Resolves: rhbz#1647678 sudo access denied with pam_access and pts terminal configurations</changelog>
  <changelog author="Marek Tamaskovic &lt;mtamasko@redhat.com&gt; 1.8.23-7" date="1566475200">- RHEL-7.8 erratum
  Resolves: rhbz#1738841 Crash in do_syslog() while doing sudoedit</changelog>
  <changelog author="Marek Tamaskovic &lt;mtamasko@redhat.com&gt; 1.8.23-8" date="1571313600">- RHEL-7.8
- fixed CVE-2019-14287
  Resolves: rhbz#1760695</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.23-9" date="1580904000">- RHEL-7.8
- CVE-2019-18634
  Resolves: rhbz#1798095</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.23-10" date="1585137600">- RHEL-7.9
- sudo allows privilege escalation with expire password
  Resolves: rhbz#1788196</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.23-10.1" date="1611144000">- RHEL 7.9.Z ERRATUM
- CVE-2021-3156
Resolves: rhbz#1917729</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.23-10.2" date="1625832000">- RHEL 7.9.Z ERRATUM
- defaults use_pty plus SELinux ROLE in user specification breaks terminal
  Resolves: rhbz#1972820</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.23-10.3" date="1673438400">RHEL 7.9.Z ERRATUM
- CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
Resolves: rhbz#2161222</changelog>
</package>
<package pkgid="09cb1e35d2230a8335c90d698e3dfe1d99cd1fecc4bcf5724504276c08e3306d" name="sysstat" arch="src">
  <version epoch="0" ver="10.1.5" rel="20.el7_9"/>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 10.1.5-11" date="1464782400">- related: #1332662
  fixed more coverity issues</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-12" date="1490788800">- sar: output timestamps when running with ko_KR.UTF-8 locale (#1381128)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-13" date="1510142400">- fix output of pidstat -p $PID (#1448489)
- improve reading of /proc/cpuinfo on Power (#1440000)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-14" date="1529582400">- backport -F switch for monitoring currently mounted filesystems (#1543238)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-15" date="1529668800">- backport some more follow-up bugfixes related to -F (#1543238)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-16" date="1529668801">- apply previously added patches (#1543238)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 10.1.5-17" date="1529928000">- fix potential buffer overflow identified by cppcheck (#1543238)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 10.1.5-18" date="1553774400">- add -f flag to force fdatasync() after sa file update (#1662094)
- don't call filesystem count functions when we are not collecting fs statistics (#1670060)
- skip autofs when gathering filesystem statistics (#1670060)
- fix use of incorrect preposition in sar man page (#1624410)
- fix CPU usage reporting (#1618688)</changelog>
  <changelog author="Michal Seklet&#xE1;r &lt;msekleta@redhat.com&gt; - 10.1.5-19" date="1579521600">- fix possible segfault when appending to data file (#1774590)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 10.1.5-20" date="1668168000">- do not cap %usr to 100% in `pidstat -I` for multithreaded programs (#1763579)</changelog>
</package>
<package pkgid="46e8226707476ff6ecc6f0de25808919f89faef1a59759a6941803f7c1347b87" name="system-config-users" arch="src">
  <version epoch="0" ver="1.3.5" rel="5.el7_9"/>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 1.3.0-1" date="1351857600">- pull updated translations</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 1.3.1-1" date="1352376000">- tighten policy</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 1.3.2-1" date="1354104000">- avoid deleting primary groups of remaining users (#881022)</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 1.3.3-1" date="1355227200">- fix editing group properties (#885147)
- pull updated and new translations</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 1.3.4-1" date="1363867200">- don't ask libuser to create a home directory over an existing one (#908852,
  patch by Miloslav Trmač)
- correct check if SELinux is enabled</changelog>
  <changelog author="Nils Philippsen &lt;nils@redhat.com&gt; - 1.3.5-1" date="1376395200">- cope with changes handling empty shadow fields in libuser (patches by
  Miloslav Trmač)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.5-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 1.3.5-3" date="1523620800">- Resolves: #1563896 - don't use exec in pkexec wrapper script</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 1.3.5-4" date="1533038400">- Related: #1502438</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 1.3.5-5" date="1601553600">- Resolves: #1825765, dialog appears when minimizing system-config-users window on Apr 1st</changelog>
</package>
<package pkgid="bc82720ac79dda7617695fc74d5a435f6e6eea7f768761614f1db5ffe5cce389" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="78.el7_9.2"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-73.1" date="1575028800">- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-73.2" date="1582027200">- core: when restarting services, don't close fds (#1803802)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802)
- tests: add basic journal test (#1803802)
- tests: add regression test for `systemctl restart systemd-journald` (#1803802)
- tests: add test that journald keeps fds over termination by signal (#1803802)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-73.3" date="1583409600">- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-74" date="1588075200">- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#1757704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to mount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-75" date="1588161600">- journal: break recursion (#1778744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-76" date="1588161601">- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
</package>
<package pkgid="765cf4b37769aa12fd5a2355ef9bc57186697bef293963f77c4d95d1ebda95ff" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="78.el7_9.3"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-73.2" date="1582027200">- core: when restarting services, don't close fds (#1803802)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1803802)
- tests: add basic journal test (#1803802)
- tests: add regression test for `systemctl restart systemd-journald` (#1803802)
- tests: add test that journald keeps fds over termination by signal (#1803802)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-73.3" date="1583409600">- journal: do not trigger assertion when journal_file_close() get NULL (#1807798)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-74" date="1588075200">- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#1757704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to mount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-75" date="1588161600">- journal: break recursion (#1778744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-76" date="1588161601">- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
</package>
<package pkgid="2b49f13bdb2ac5a4e6b0b79ad7751f35fc214066436a0bb8085fb05730e26ce4" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="78.el7_9.5"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-74" date="1588075200">- sd-bus: bump message queue size again (#1770158)
- unit: fix potential use of cgroup_path after free() when freeing unit (#1760149)
- add test for ExecStopPost (#1733998)
- core: when restarting services, don't close fds (#1757704)
- unit: rework a bit how we keep the service fdstore from being destroyed during service restart (#1757704)
- tests: add basic journal test (#1757704)
- tests: add regression test for `systemctl restart systemd-journald` (#1757704)
- tests: add test that journald keeps fds over termination by signal (#1757704)
- nss-util: silence warning about deprecated RES_USE_INET6 (#1799002)
- journal: do not trigger assertion when journal_file_close() get NULL (#1786046)
- mount: don't propagate errors from mount_setup_unit() further up (#1804757)
- mount: when allocating a Mount object based on /proc/self/mountinfo mark it so (#1804757)
- fix the fix for #1691511 (#1804757)
- v3: Properly parsing SCSI Hyperv devices (#8509) (#1809053)
- Consider smb3 as remote filesystem (#1811700)
- mount: don't add Requires for tmp.mount (#1813270)
- sd-bus: when attached to an sd-event loop, disconnect on processing errors (#1769928)
- sd-journal: close journal files that were deleted by journald before we've setup inotify watch (#1812889)
- sd-journal: remove the dead code and actually fix #14695 (#1812889)
- swap: adjust swap.c in a similar way to what we just did to mount.c (#1749621)
- swap: finish the secondary swap units' jobs if deactivation of the primary swap unit fails (#1749621)
- core: add a new unit file setting CollectMode= for tweaking the GC logic (#1817576)
- run: add "-G" as shortcut for "--property=CollectMode=inactive-or-failed" (#1817576)
- core: clarify that the CollectMode bus property is constant (#1817576)
- udev-rules: make tape-changers also apprear in /dev/tape/by-path/ (#1814028)
- logind: check PolicyKit before allowing VT switch (#1797672)
- timer: don't use persietent file timestamps from the future (#6823) (#1769923)
- core: transition to FINAL_SIGTERM state after ExecStopPost= (#1766477)
- bus_open leak sd_event_source when udevadm trigger。 (#1798503)
- journal-remote: split-mode=host, remove port from journal filename (#1244691)
- core: downgrade log message about inability to propagate cgroup release message (#1679934)
- units: move Before deps for quota services to remote-fs.target (#5627) (#1693374)
- set kptr_restrict=1 (#1689344)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-75" date="1588161600">- journal: break recursion (#1778744)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-76" date="1588161601">- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.4" date="1638187200">- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.5" date="1638792000">- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361)</changelog>
</package>
<package pkgid="388abd6b20b47d6b98eb9f9ce580e2b914aaa66ac30363a5be011ff73d5b230c" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="78.el7_9.7"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-76" date="1588161600">- core: enforce a ratelimiter when stopping units due to StopWhenUnneeded=1 (#1775291)
- core: rework StopWhenUnneeded= logic (#1775291)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.4" date="1638187200">- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.5" date="1638792000">- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.6" date="1659441600">- resolved: pin stream while calling callbacks for it (#2110544)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.7" date="1659614400">- resolve: introduce reference counting on DnsStream (#2110544)</changelog>
</package>
<package pkgid="c1c161f6bdfed1b61a7180ca4fa64cc55832c72649678f0a6c51f31140bde486" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="78.el7_9.8"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-77" date="1588248000">- core: coldplug possible nop_job (#1829754)
- core: make sure to restore the control command id, too (#1828953)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.4" date="1638187200">- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.5" date="1638792000">- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.6" date="1659441600">- resolved: pin stream while calling callbacks for it (#2110544)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.7" date="1659614400">- resolve: introduce reference counting on DnsStream (#2110544)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.8" date="1695729600">- fstab-generator: Chase symlinks where possible (#6293) (RHEL-6223)</changelog>
</package>
<package pkgid="fa96c4935dc3df267b573b9f8124c9cea2f735be39b5ab1aaaa81efc39d7e0bf" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="78.el7_9.9"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78" date="1589284800">- avoid double free (#1832816)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.1" date="1597233600">- device: make sure we emit PropertiesChanged signal once we set sysfs (#1793527)
- device: don't emit PropetiesChanged needlessly (#1793527)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.2" date="1603108800">- core: don't update unit description if it is already set to the same value (#1793527)
- unit: don't emit PropertiesChanged signal if adding a dependency to a unit is a no-op (#1793527)
- core: fix unnecessary fallback to the rescue mode caused by initrd-switch-root.service's exit status judgment error (#1825232)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.3" date="1610712000">- core: Detect initial timer state from serialized data (#1764908)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.4" date="1638187200">- test: add a test/reproducer for BZ#1989245 (#1989245)
- strv: fix buffer size calculation in strv_join_quoted() (#1989245)
- install: refactor find_symlinks() and don't search for symlinks recursively (#1828758)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.5" date="1638792000">- install: fix a potential crash (#1828758)
- acl-util: only set the mask if not present (#2026361)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.6" date="1659441600">- resolved: pin stream while calling callbacks for it (#2110544)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.7" date="1659614400">- resolve: introduce reference counting on DnsStream (#2110544)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.8" date="1695729600">- fstab-generator: Chase symlinks where possible (#6293) (RHEL-6223)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 219-78.9" date="1700654400">- Revert "fstab-generator: Chase symlinks where possible (#6293)" (RHEL-17164)</changelog>
</package>
<package pkgid="a0b2170b882eb1a748867ac8e601e2c79de7119bb204f77a9419b78add751705" name="targetcli" arch="src">
  <version epoch="0" ver="2.1.53" rel="1.el7_9"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-4" date="1524484800">- Properly detect errors when writing backup files. (Closes: #80) (#81)
- Read number of backup files to keep from file
- config: defend on '/etc/target/backup' directory
- config: backup when current config is different from recent backup copy
- config: rename key 'kept_backups' as 'max_backup_files'
- backup: global option to tune max no. of backup conf files</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-5" date="1528113600">- saveconfig: way for block-level save with delete command</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-6" date="1528891200">- handle backups with block-level delete</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-7" date="1533729600">- Respin a new release of targetcli to avoid problems with TPS tests.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb49-1" date="1548763200">- Rebase to latest upstream version</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb49-2" date="1568030400">- Get a lock to avoid the issues with concurrent backstore creation</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb49-3" date="1585137600">- Respin a new release of targetcli.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb51-1" date="1585915200">- Update to a new upstream version</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.51-2" date="1586174400">- Add the interactive daemon console.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.53-1" date="1602244800">- Rebase the targetcli package to fix some security issues</changelog>
</package>
<package pkgid="4759cdd26d31c9f0ec25a5c69efca6e009e86e24aefa695b99144365015b3d7e" name="tboot" arch="src">
  <version epoch="1" ver="1.9.12" rel="1.el7_9"/>
  <changelog author="David Cantrell &lt;dcantrell@redhat.com&gt; - 1:1.7.4-1" date="1390305600">- Upgrade to tboot 1.7.4 to fix S3, S4, and S5
  Resolves: rhbz#1046872</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 1:1.8.2-1" date="1412683200">- Upgrade to tboot 1.8.2
  Resolves: rhbz#1147070</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 1:1.9.4-1" date="1463659200">- Upgrade 1.9.4 release
- Fixed bad day-of-week of first entry in changelog
- Do not install on systems with efi partition
  See https://access.redhat.com/articles/2217041
  Resolves: rhbz#1275031
  Resolves: rhbz#1293526
  Resolves: rhbz#1307176
  Resolves: rhbz#1313876
  Resolves: rhbz#1332691</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 1:1.9.4-2" date="1470744000">- Test for UEFI system with /sys/firmware/efi, rather than looking in
  the boot directory for an efi directory.
- Allow install on UEFI platform, but with warning message, in order to
  permit completion of provisioning.
  Resolves: rhbz#1356571</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 1:1.9.5-1" date="1485518400">Rebase to 1.9.5
  Resolves: rhbz#1384210</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 1:1.9.6-1" date="1505131200">Rebase to 1.96
  Resolves: rhbz#1457529</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 1:1.9.6-2" date="1516881600">[PATCH] MANPATH should not be used as install dir
  Resolves: rhbz#1450968</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 1:1.9.6-3" date="1531742400">Apply patches from upstream since realease of 1.9.6
  Resolves: rhbz#1515081
  Resolves: rhbz#1511798</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 1:1.9.9-1" date="1552910400">Update to latest tboot.
  Resolves rhbz#1641138</changelog>
  <changelog author="Tony Camuso &lt;tcamuso@redhat.com&gt; - 1:1.9.12-1" date="1611230400">- Upgrade to 1.9.12.
- Removed EFI warning, since grub has been updated to use multiboot.
- Add patch to revert "Disable GCC9 address-of-packed-member warning"
  While it was able to build locally with 'rhpkg local', the brew
  build failed, because the compiler on the brew systems did not
  recognized the new GCC9 command line flag:
  -Wno-address-of-packed-member
  Resolves: rhbz#1876747</changelog>
</package>
<package pkgid="650495eff36505230175602a4ba5d1a25ebdbe600952013e804f595fd6873695" name="tcsh" arch="src">
  <version epoch="0" ver="6.18.01" rel="17.el7_9.1"/>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; -  6.18.01-9" date="1459252800">- 'if statement' parsing fixed when the space is missing after ')'. (#1273892)
- Quote backslashes properly to preserve them in `...` expressions. (#1319816)
- Fix for tcsh being interruptible while waiting for child process. (#1269370)
- Fix of memory leak when using the 'source' built-in command.      (#1273513)
- Print error message on stderr (instead of stdout).                (#1273498)
- Use GLIBC's malloc instead of builtin malloc.                     (#1315713)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 6.18.01-10" date="1460030400">- Handle the ^C interrupt correctly when using the 'eval' built-in. (#1273500)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 6.18.01-11" date="1463400000">- Fix regression introduced in tcsh-6.18.01-quote-backslashes-properly.patch
  Related: #1319816</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 6.18.01-12" date="1464264000">- Fix another regression in tcsh-6.18.01-quote-backslashes-properly.patch
  Related: #1334751

- Fix regression in tcsh-6.18.01-use-stderr-upon-error.patch
  Related: #1273498</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 6.18.01-13" date="1468497600">- Fix yet another regression in tcsh-6.18.01-quote-backslashes-properly.patch
  Related: #1334751</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 6.18.01-14" date="1486468800">- fix hanging of tcsh when .history file is located on remote filesystem (#1388426)</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 6.18.01-15" date="1487246400">- fix for memory leak when cdpath fails to find a matching path (#1325346)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 6.18.01-16" date="1572004800">- fix for rapid memory consumption caused by corrupted history (#1598502)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 6.18.01-17" date="1591704000">- fix regression caused by backported patch, command var is now set as before (#1842722)</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 6.18.01-17.el7.1" date="1594728000">- fix regression caused by corrupted history (#1846271)
- fix typo in spec</changelog>
</package>
<package pkgid="d41d65916f98606534d3963716d75e6aee62824d658fc7ec4522e3655015127a" name="telnet" arch="src">
  <version epoch="1" ver="0.17" rel="66.el7"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 1:0.17-57" date="1374062400">- enable hardened build
- fix dates in changelog
- add systemd to BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:0.17-58" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:0.17-59" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 1:0.17-60" date="1467374400">- Introduce new -i switch
- ip addresses will be logged into utmp instead of hostname
- Resolves: #1323094</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 1:0.17-61" date="1484740800">- Resolves: #1367415 - No option to specify IPv6 or IPv4 explicitly must be used</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 1:0.17-62" date="1485172800">- Related: #1367415 - No option to specify IPv6 or IPv4 explicitly must be used</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 1:0.17-63" date="1492603200">- Related: #1367415 - No option to specify IPv6 or IPv4 explicitly must be used
                    - additional info added to manpage</changelog>
  <changelog author="Michal Ruprich - 1:0.17-64" date="1492603201">- Related: #1367415 - No option to specify IPv6 or IPv4 explicitly must be used
                    - more clear formulation of man page note - previous note was a bit ambiguous</changelog>
  <changelog author="Michal Ruprich &lt;michalruprich@gmail.com&gt; - 1:0.17-65" date="1585224000">- Resolves: #1814476 - Arbitrary remote code execution in utility.c via short writes or urgent data</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 1:0.17-66" date="1600776000">- Resolves: #1853102 - in.telnetd needs to tolerate temporary EIO errors</changelog>
</package>
<package pkgid="b960cede941eefadad4b38ad405c345b9a707475ca6e07f5cbfb8a933bbe81a9" name="thunderbird" arch="src">
  <version epoch="0" ver="102.10.0" rel="2.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.6.0-1" date="1670587200">- Update to 102.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.6.0-2" date="1670932800">- Update to 102.6.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.0-1" date="1673870400">- Update to 102.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.1-1" date="1674561600">- Update to 102.7.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.1-2" date="1675166400">- Update to 102.7.1 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-1" date="1676030400">- Update to 102.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-2" date="1676462400">- Update to 102.8.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.9.0-2" date="1678708800">- Update to 102.9.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-1" date="1680782400">- Update to 102.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-2" date="1681214400">- Update to 102.10.0 build2</changelog>
</package>
<package pkgid="6702d2fad33fb346a248a5c13fc4e3ba682f4d0d0b7f4adc49b68df2ac249ba1" name="thunderbird" arch="src">
  <version epoch="0" ver="102.11.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.6.0-2" date="1670932800">- Update to 102.6.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.0-1" date="1673870400">- Update to 102.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.1-1" date="1674561600">- Update to 102.7.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.1-2" date="1675166400">- Update to 102.7.1 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-1" date="1676030400">- Update to 102.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-2" date="1676462400">- Update to 102.8.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.9.0-2" date="1678708800">- Update to 102.9.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-1" date="1680782400">- Update to 102.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-2" date="1681214400">- Update to 102.10.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-1" date="1683201600">- Update to 102.11.0 build1</changelog>
</package>
<package pkgid="204f3e92ef8c0695c66cc8536effd9484c6dd610007b86f472213e65949abf5d" name="thunderbird" arch="src">
  <version epoch="0" ver="102.12.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.0-1" date="1673870400">- Update to 102.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.1-1" date="1674561600">- Update to 102.7.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.1-2" date="1675166400">- Update to 102.7.1 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-1" date="1676030400">- Update to 102.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-2" date="1676462400">- Update to 102.8.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.9.0-2" date="1678708800">- Update to 102.9.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-1" date="1680782400">- Update to 102.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-2" date="1681214400">- Update to 102.10.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-1" date="1683201600">- Update to 102.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.12.0-1" date="1685966400">- Update to 102.12.0 build1</changelog>
</package>
<package pkgid="2a345d5efe994bd99c3da48e3e78bd673c78bf10965724cefa2c1a449cdd2d51" name="thunderbird" arch="src">
  <version epoch="0" ver="102.13.0" rel="2.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.1-2" date="1675166400">- Update to 102.7.1 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-1" date="1676030400">- Update to 102.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-2" date="1676462400">- Update to 102.8.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.9.0-2" date="1678708800">- Update to 102.9.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-1" date="1680782400">- Update to 102.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-2" date="1681214400">- Update to 102.10.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-1" date="1683201600">- Update to 102.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.12.0-1" date="1685966400">- Update to 102.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.13.0-1" date="1688558400">- Update to 102.13.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.13.0-2" date="1688731200">- Update to 102.13.0 build2</changelog>
</package>
<package pkgid="f6d3a6e26983d70cf47ad7423c40721c337accfd51f25951b37d993405e029e4" name="thunderbird" arch="src">
  <version epoch="0" ver="102.14.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-1" date="1676030400">- Update to 102.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-2" date="1676462400">- Update to 102.8.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.9.0-2" date="1678708800">- Update to 102.9.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-1" date="1680782400">- Update to 102.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-2" date="1681214400">- Update to 102.10.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-1" date="1683201600">- Update to 102.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.12.0-1" date="1685966400">- Update to 102.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.13.0-1" date="1688558400">- Update to 102.13.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.13.0-2" date="1688731200">- Update to 102.13.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.14.0-1" date="1690891200">- Update to 102.14.0 build1</changelog>
</package>
<package pkgid="0926db21082266f51691b49fdcd230f49a2b1a3cad242472ff88af3b8a3b0e29" name="thunderbird" arch="src">
  <version epoch="0" ver="102.14.0" rel="3.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.9.0-2" date="1678708800">- Update to 102.9.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-1" date="1680782400">- Update to 102.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-2" date="1681214400">- Update to 102.10.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-1" date="1683201600">- Update to 102.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.12.0-1" date="1685966400">- Update to 102.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.13.0-1" date="1688558400">- Update to 102.13.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.13.0-2" date="1688731200">- Update to 102.13.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.14.0-1" date="1690891200">- Update to 102.14.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.14.0-2" date="1691582400">- Rebuild due to rhbz#2228948</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.14.0-3" date="1691582401">- Bump NVR to rebuild</changelog>
</package>
<package pkgid="1c4474bfa3dfcf4e031d9f32b2428065d483ff4f772b091c245104754a02dd85" name="thunderbird" arch="src">
  <version epoch="0" ver="102.15.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-1" date="1680782400">- Update to 102.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-2" date="1681214400">- Update to 102.10.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-1" date="1683201600">- Update to 102.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.12.0-1" date="1685966400">- Update to 102.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.13.0-1" date="1688558400">- Update to 102.13.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.13.0-2" date="1688731200">- Update to 102.13.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.14.0-1" date="1690891200">- Update to 102.14.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.14.0-2" date="1691582400">- Rebuild due to rhbz#2228948</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.14.0-3" date="1691582401">- Bump NVR to rebuild</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.15.0-1" date="1693224000">- Update to 102.15.0 build1</changelog>
</package>
<package pkgid="379d6e6823904847914ed619218252f696676224221162fd1916129399ace5f6" name="thunderbird" arch="src">
  <version epoch="0" ver="102.15.1" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-2" date="1681214400">- Update to 102.10.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-1" date="1683201600">- Update to 102.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.12.0-1" date="1685966400">- Update to 102.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.13.0-1" date="1688558400">- Update to 102.13.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.13.0-2" date="1688731200">- Update to 102.13.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.14.0-1" date="1690891200">- Update to 102.14.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.14.0-2" date="1691582400">- Rebuild due to rhbz#2228948</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.14.0-3" date="1691582401">- Bump NVR to rebuild</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.15.0-1" date="1693224000">- Update to 102.15.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.15.1-1" date="1694606400">- Update to 102.15.1</changelog>
</package>
<package pkgid="746385439197da01d5a8d439b94591bd5d27472c50bcc2ce245e5a2ac0bf953c" name="thunderbird" arch="src">
  <version epoch="0" ver="102.3.0" rel="3.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-1" date="1651147200">- Update to 91.9.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-2" date="1651492800">- Update to 91.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-3" date="1651579200">- Update to 91.9.0 build3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.9.1-1" date="1653307200">- Update to 91.9.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.10.0-1" date="1653912000">- Update to 91.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-1" date="1655985600">- Update to 91.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-2" date="1656417600">- Update to 91.11.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.12.0-1" date="1658750400">- Update to 91.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.13.0-1" date="1660910400">- Update to 91.13.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-3" date="1663329600">- Update to 102.3.0 build1</changelog>
</package>
<package pkgid="4ddb6c7d871c4aa0bb649611c9a403883bd5c56ddb58742cf70dfbd8235d6d49" name="thunderbird" arch="src">
  <version epoch="0" ver="102.3.0" rel="4.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-2" date="1651492800">- Update to 91.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-3" date="1651579200">- Update to 91.9.0 build3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.9.1-1" date="1653307200">- Update to 91.9.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.10.0-1" date="1653912000">- Update to 91.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-1" date="1655985600">- Update to 91.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-2" date="1656417600">- Update to 91.11.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.12.0-1" date="1658750400">- Update to 91.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.13.0-1" date="1660910400">- Update to 91.13.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-3" date="1663329600">- Update to 102.3.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-4" date="1665576000">- Fix for expat CVE-2022-40674</changelog>
</package>
<package pkgid="af80bff92438d5a362bc7663b185c76b7cc63a9f757c46c7c743c0b317f54a35" name="thunderbird" arch="src">
  <version epoch="0" ver="102.4.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-3" date="1651579200">- Update to 91.9.0 build3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.9.1-1" date="1653307200">- Update to 91.9.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.10.0-1" date="1653912000">- Update to 91.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-1" date="1655985600">- Update to 91.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-2" date="1656417600">- Update to 91.11.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.12.0-1" date="1658750400">- Update to 91.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.13.0-1" date="1660910400">- Update to 91.13.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-3" date="1663329600">- Update to 102.3.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-4" date="1665576000">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.4.0-1" date="1666008000">- Update to 102.4.0 build1</changelog>
</package>
<package pkgid="c8fd86d06b69f3d44be6daa53f47aa461e72bc1db71325b77b7a4c5a6c6df211" name="thunderbird" arch="src">
  <version epoch="0" ver="102.5.0" rel="2.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.10.0-1" date="1653912000">- Update to 91.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-1" date="1655985600">- Update to 91.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-2" date="1656417600">- Update to 91.11.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.12.0-1" date="1658750400">- Update to 91.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.13.0-1" date="1660910400">- Update to 91.13.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-3" date="1663329600">- Update to 102.3.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-4" date="1665576000">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.4.0-1" date="1666008000">- Update to 102.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.5.0-1" date="1668168000">- Update to 102.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.5.0-2" date="1668513600">- Update to 102.5.0 build2</changelog>
</package>
<package pkgid="999c0f4c157e2d79063ac64f520b8ee768620fee843f03ed8e7ad5958b97eb26" name="thunderbird" arch="src">
  <version epoch="0" ver="102.6.0" rel="2.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.12.0-1" date="1658750400">- Update to 91.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.13.0-1" date="1660910400">- Update to 91.13.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-3" date="1663329600">- Update to 102.3.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-4" date="1665576000">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.4.0-1" date="1666008000">- Update to 102.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.5.0-1" date="1668168000">- Update to 102.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.5.0-2" date="1668513600">- Update to 102.5.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.5.0-3" date="1669723200">- Use openssl for the librnp crypto backend to enable the openpgp encryption</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.6.0-1" date="1670587200">- Update to 102.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.6.0-2" date="1670932800">- Update to 102.6.0 build2</changelog>
</package>
<package pkgid="5f0c6315a0ea2bdc424f55c93daab2d363142f0f0ff742ba9e784e3861714de6" name="thunderbird" arch="src">
  <version epoch="0" ver="102.7.1" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-3" date="1663329600">- Update to 102.3.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-4" date="1665576000">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.4.0-1" date="1666008000">- Update to 102.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.5.0-1" date="1668168000">- Update to 102.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.5.0-2" date="1668513600">- Update to 102.5.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.5.0-3" date="1669723200">- Use openssl for the librnp crypto backend to enable the openpgp encryption</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.6.0-1" date="1670587200">- Update to 102.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.6.0-2" date="1670932800">- Update to 102.6.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.0-1" date="1673870400">- Update to 102.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.1-1" date="1674561600">- Update to 102.7.1 build1</changelog>
</package>
<package pkgid="6cf33369ced1ce1c137df8a03bdaa70f3c5727a1ca99ea7d730df2056cecb975" name="thunderbird" arch="src">
  <version epoch="0" ver="102.7.1" rel="2.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.3.0-4" date="1665576000">- Fix for expat CVE-2022-40674</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.4.0-1" date="1666008000">- Update to 102.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.5.0-1" date="1668168000">- Update to 102.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.5.0-2" date="1668513600">- Update to 102.5.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.5.0-3" date="1669723200">- Use openssl for the librnp crypto backend to enable the openpgp encryption</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.6.0-1" date="1670587200">- Update to 102.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.6.0-2" date="1670932800">- Update to 102.6.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.0-1" date="1673870400">- Update to 102.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.1-1" date="1674561600">- Update to 102.7.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.1-2" date="1675166400">- Update to 102.7.1 build2</changelog>
</package>
<package pkgid="c2909ba3f00e934eb64d0d8154d767bbf82d3245adb23cfead3351d6ca19fffc" name="thunderbird" arch="src">
  <version epoch="0" ver="102.8.0" rel="2.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.5.0-1" date="1668168000">- Update to 102.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.5.0-2" date="1668513600">- Update to 102.5.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.5.0-3" date="1669723200">- Use openssl for the librnp crypto backend to enable the openpgp encryption</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.6.0-1" date="1670587200">- Update to 102.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.6.0-2" date="1670932800">- Update to 102.6.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.0-1" date="1673870400">- Update to 102.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.1-1" date="1674561600">- Update to 102.7.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.1-2" date="1675166400">- Update to 102.7.1 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-1" date="1676030400">- Update to 102.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-2" date="1676462400">- Update to 102.8.0 build2</changelog>
</package>
<package pkgid="04c2b1912dd140f1e8c9565def71a3e023f8d87757470629f53ff1748f8f21e6" name="thunderbird" arch="src">
  <version epoch="0" ver="102.9.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.5.0-2" date="1668513600">- Update to 102.5.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 102.5.0-3" date="1669723200">- Use openssl for the librnp crypto backend to enable the openpgp encryption</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.6.0-1" date="1670587200">- Update to 102.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.6.0-2" date="1670932800">- Update to 102.6.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.0-1" date="1673870400">- Update to 102.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.1-1" date="1674561600">- Update to 102.7.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.1-2" date="1675166400">- Update to 102.7.1 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-1" date="1676030400">- Update to 102.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-2" date="1676462400">- Update to 102.8.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.9.0-1" date="1678708800">- Update to 102.9.0 build1</changelog>
</package>
<package pkgid="4380de5a92ba03fa0a51c5dd5ff973c6819c3d9a5cf1b6a3ccb775226782a10d" name="thunderbird" arch="src">
  <version epoch="0" ver="115.10.0" rel="2.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-2" date="1697889600">- Update to 115.4.0 build2</changelog>
  <changelog author="Anton Bobrov &lt;abobrov@redhat.com&gt; - 115.4.0-3" date="1698148800">- Update to 115.4.0 build3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.1-1" date="1698235200">- Update to 115.4.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.5.0-1" date="1700568000">- Update to 115.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.6.0-1" date="1702900800">- Update to 115.6.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.7.0-1" date="1705924800">- Update to 115.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.8.0-1" date="1708344000">- Update to 115.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.0-1" date="1710763200">- Update to 115.9.0 build1
- Fix expat CVE-2023-52425</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.10.0-1" date="1712923200">- Update to 115.10.0 build1
- Revert expat CVE-2023-52425 fix</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.10.0-2" date="1713182400">- Update to 115.10.0 build2</changelog>
</package>
<package pkgid="3a5a2329b68bc7f6ca1cac260e138d3a5af9759edab6d605e19c781cf48b81e1" name="thunderbird" arch="src">
  <version epoch="0" ver="115.11.0" rel="1.el7_9"/>
  <changelog author="Anton Bobrov &lt;abobrov@redhat.com&gt; - 115.4.0-3" date="1698148800">- Update to 115.4.0 build3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.1-1" date="1698235200">- Update to 115.4.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.5.0-1" date="1700568000">- Update to 115.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.6.0-1" date="1702900800">- Update to 115.6.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.7.0-1" date="1705924800">- Update to 115.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.8.0-1" date="1708344000">- Update to 115.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.0-1" date="1710763200">- Update to 115.9.0 build1
- Fix expat CVE-2023-52425</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.10.0-1" date="1712923200">- Update to 115.10.0 build1
- Revert expat CVE-2023-52425 fix</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.10.0-2" date="1713182400">- Update to 115.10.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.11.0-1" date="1715601600">- Update to 115.11.0 build2</changelog>
</package>
<package pkgid="0f91a05035a5469a57ba6ecb704ef138c93b8da4782e1cf0db29f5ed3f3d14a9" name="thunderbird" arch="src">
  <version epoch="0" ver="115.12.1" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.6.0-1" date="1702900800">- Update to 115.6.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.7.0-1" date="1705924800">- Update to 115.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.8.0-1" date="1708344000">- Update to 115.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.0-1" date="1710763200">- Update to 115.9.0 build1
- Fix expat CVE-2023-52425</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.10.0-1" date="1712923200">- Update to 115.10.0 build1
- Revert expat CVE-2023-52425 fix</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.10.0-2" date="1713182400">- Update to 115.10.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.11.0-1" date="1715601600">- Update to 115.11.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.12.0-1" date="1718020800">- Update to 115.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.12.0-2" date="1718107200">- Update to 115.12.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.12.1-1" date="1718712000">- Update to 115.12.1 build1</changelog>
</package>
<package pkgid="f9b6beb1efe4c88d235351d507e42a43bcc92218539148f16496fe1d87f1de3a" name="thunderbird" arch="src">
  <version epoch="0" ver="115.3.1" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.7.1-2" date="1675166400">- Update to 102.7.1 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-1" date="1676030400">- Update to 102.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.8.0-2" date="1676462400">- Update to 102.8.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.9.0-2" date="1678708800">- Update to 102.9.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-1" date="1680782400">- Update to 102.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-2" date="1681214400">- Update to 102.10.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-1" date="1683201600">- Update to 102.11.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.2.1-5" date="1694174400">- Update to 115.2.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.0-1" date="1695816000">- Update to 115.3.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.1-1" date="1695988800">- Update to 115.3.1 build1</changelog>
</package>
<package pkgid="a6361594c4795045bacf3f799cf6867b3d02fd7138ecd10f08c71b19e85ed3b0" name="thunderbird" arch="src">
  <version epoch="0" ver="115.4.1" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-1" date="1680782400">- Update to 102.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-2" date="1681214400">- Update to 102.10.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-1" date="1683201600">- Update to 102.11.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.2.1-5" date="1694174400">- Update to 115.2.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.0-1" date="1695816000">- Update to 115.3.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.1-1" date="1695988800">- Update to 115.3.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-1" date="1697803200">- Update to 115.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-2" date="1697889600">- Update to 115.4.0 build2</changelog>
  <changelog author="Anton Bobrov &lt;abobrov@redhat.com&gt; - 115.4.0-3" date="1698148800">- Update to 115.4.0 build3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.1-1" date="1698235200">- Update to 115.4.1 build1</changelog>
</package>
<package pkgid="1da64460d4b188e1493ab413d9e1594e831f679b45c62c884ed873dbe4488061" name="thunderbird" arch="src">
  <version epoch="0" ver="115.5.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.10.0-2" date="1681214400">- Update to 102.10.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-1" date="1683201600">- Update to 102.11.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.2.1-5" date="1694174400">- Update to 115.2.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.0-1" date="1695816000">- Update to 115.3.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.1-1" date="1695988800">- Update to 115.3.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-1" date="1697803200">- Update to 115.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-2" date="1697889600">- Update to 115.4.0 build2</changelog>
  <changelog author="Anton Bobrov &lt;abobrov@redhat.com&gt; - 115.4.0-3" date="1698148800">- Update to 115.4.0 build3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.1-1" date="1698235200">- Update to 115.4.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.5.0-1" date="1700568000">- Update to 115.5.0 build1</changelog>
</package>
<package pkgid="97b50f2418b392e31ccd383d8af6f91b8ac26f10d98b811f49830d427b9969e1" name="thunderbird" arch="src">
  <version epoch="0" ver="115.6.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 102.11.0-1" date="1683201600">- Update to 102.11.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.2.1-5" date="1694174400">- Update to 115.2.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.0-1" date="1695816000">- Update to 115.3.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.1-1" date="1695988800">- Update to 115.3.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-1" date="1697803200">- Update to 115.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-2" date="1697889600">- Update to 115.4.0 build2</changelog>
  <changelog author="Anton Bobrov &lt;abobrov@redhat.com&gt; - 115.4.0-3" date="1698148800">- Update to 115.4.0 build3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.1-1" date="1698235200">- Update to 115.4.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.5.0-1" date="1700568000">- Update to 115.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.6.0-1" date="1702900800">- Update to 115.6.0 build2</changelog>
</package>
<package pkgid="1e87ad0e5c9e4d8e20dd372a2fe022fd0d7808c3bd1ba7b402589e6360427291" name="thunderbird" arch="src">
  <version epoch="0" ver="115.7.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 115.2.1-5" date="1694174400">- Update to 115.2.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.0-1" date="1695816000">- Update to 115.3.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.1-1" date="1695988800">- Update to 115.3.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-1" date="1697803200">- Update to 115.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-2" date="1697889600">- Update to 115.4.0 build2</changelog>
  <changelog author="Anton Bobrov &lt;abobrov@redhat.com&gt; - 115.4.0-3" date="1698148800">- Update to 115.4.0 build3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.1-1" date="1698235200">- Update to 115.4.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.5.0-1" date="1700568000">- Update to 115.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.6.0-1" date="1702900800">- Update to 115.6.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.7.0-1" date="1705924800">- Update to 115.7.0 build1</changelog>
</package>
<package pkgid="7a34f2c46454156aeaf504077f444fe0081878872de49d313df17009ed0cacde" name="thunderbird" arch="src">
  <version epoch="0" ver="115.8.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.0-1" date="1695816000">- Update to 115.3.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.1-1" date="1695988800">- Update to 115.3.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-1" date="1697803200">- Update to 115.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-2" date="1697889600">- Update to 115.4.0 build2</changelog>
  <changelog author="Anton Bobrov &lt;abobrov@redhat.com&gt; - 115.4.0-3" date="1698148800">- Update to 115.4.0 build3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.1-1" date="1698235200">- Update to 115.4.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.5.0-1" date="1700568000">- Update to 115.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.6.0-1" date="1702900800">- Update to 115.6.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.7.0-1" date="1705924800">- Update to 115.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.8.0-1" date="1708344000">- Update to 115.8.0 build1</changelog>
</package>
<package pkgid="5eae2bb805c7dba688187993dc8fcabbbd5ede4151e9b2a34063b16d89499f40" name="thunderbird" arch="src">
  <version epoch="0" ver="115.9.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.3.1-1" date="1695988800">- Update to 115.3.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-1" date="1697803200">- Update to 115.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.0-2" date="1697889600">- Update to 115.4.0 build2</changelog>
  <changelog author="Anton Bobrov &lt;abobrov@redhat.com&gt; - 115.4.0-3" date="1698148800">- Update to 115.4.0 build3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.4.1-1" date="1698235200">- Update to 115.4.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.5.0-1" date="1700568000">- Update to 115.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.6.0-1" date="1702900800">- Update to 115.6.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.7.0-1" date="1705924800">- Update to 115.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.8.0-1" date="1708344000">- Update to 115.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 115.9.0-1" date="1710763200">- Update to 115.9.0 build1
- Fix expat CVE-2023-52425</changelog>
</package>
<package pkgid="d8043ae86d5cedf5a9e2d52d8f53d17e1589ae2d6ce9ac9163b1120da7ade0d2" name="thunderbird" arch="src">
  <version epoch="0" ver="78.10.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.5.1-1" date="1607083200">- Update to 78.5.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.6.0-1" date="1608033600">- Update to 78.6.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.6.1-1" date="1610452800">- Update to 78.6.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.0-1" date="1611662400">- Update to 78.7.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.8.0-1" date="1613736000">- Update to 78.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-1" date="1616414400">- Update to 78.9.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-2" date="1616414401">- Update to 78.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-3" date="1616500800">- Update to 78.9.0 build2, updated langpacks</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.1-1" date="1618228800">- Update to 78.9.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.10.0-1" date="1619006400">- Update to 78.10.0</changelog>
</package>
<package pkgid="ec976e5fbc696e1bc82637d6e57415da735e8b05e2029a083e29a3f2cd8ccb04" name="thunderbird" arch="src">
  <version epoch="0" ver="78.11.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.6.0-1" date="1608033600">- Update to 78.6.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.6.1-1" date="1610452800">- Update to 78.6.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.0-1" date="1611662400">- Update to 78.7.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.8.0-1" date="1613736000">- Update to 78.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-1" date="1616414400">- Update to 78.9.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-2" date="1616414401">- Update to 78.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-3" date="1616500800">- Update to 78.9.0 build2, updated langpacks</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.1-1" date="1618228800">- Update to 78.9.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.10.0-1" date="1619006400">- Update to 78.10.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.11.0-1" date="1622462400">- Update to 78.11.0 build1</changelog>
</package>
<package pkgid="664b3550e6d1f9c7b16f9c3a480bccfa0afa6e5649ad52bb9713c3aa22f8da64" name="thunderbird" arch="src">
  <version epoch="0" ver="78.12.0" rel="2.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.0-1" date="1611662400">- Update to 78.7.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.8.0-1" date="1613736000">- Update to 78.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-1" date="1616414400">- Update to 78.9.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-2" date="1616414401">- Update to 78.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-3" date="1616500800">- Update to 78.9.0 build2, updated langpacks</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.1-1" date="1618228800">- Update to 78.9.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.10.0-1" date="1619006400">- Update to 78.10.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.11.0-1" date="1622462400">- Update to 78.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.12.0-1" date="1625745600">- Update to 78.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.12.0-2" date="1626091200">- Update to 78.12.0 build2</changelog>
</package>
<package pkgid="838536a76f0f7d14c7b2e16922dc2df3f043e814f77c3a6b819af42ff7723e4d" name="thunderbird" arch="src">
  <version epoch="0" ver="78.13.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-1" date="1616414400">- Update to 78.9.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-2" date="1616414401">- Update to 78.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-3" date="1616500800">- Update to 78.9.0 build2, updated langpacks</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.1-1" date="1618228800">- Update to 78.9.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.10.0-1" date="1619006400">- Update to 78.10.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.11.0-1" date="1622462400">- Update to 78.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.12.0-1" date="1625745600">- Update to 78.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.12.0-2" date="1626091200">- Update to 78.12.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.12.0-3" date="1626436800">- Rebuild to pickup older nss</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.13.0-1" date="1628078400">- Update to 78.13.0 build1</changelog>
</package>
<package pkgid="0beabd161d67ef42b49eb517dcd5b341ef4e7a5a9f58dbc38670c3e46c218941" name="thunderbird" arch="src">
  <version epoch="0" ver="78.14.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-3" date="1616500800">- Update to 78.9.0 build2, updated langpacks</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.1-1" date="1618228800">- Update to 78.9.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.10.0-1" date="1619006400">- Update to 78.10.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.11.0-1" date="1622462400">- Update to 78.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.12.0-1" date="1625745600">- Update to 78.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.12.0-2" date="1626091200">- Update to 78.12.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.12.0-3" date="1626436800">- Rebuild to pickup older nss</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.13.0-1" date="1628078400">- Update to 78.13.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.13.0-2" date="1629115200">- Use the right name for the appstream file</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.14.0-1" date="1630584000">- Update to 78.14.0 build1</changelog>
</package>
<package pkgid="4a1d8c831d5c04b8d5d1d26b3208758896ce13364abe485abe989c031095dfd1" name="thunderbird" arch="src">
  <version epoch="0" ver="78.3.1" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.6.0-1" date="1584100800">- Update to 68.6.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.7.0-1" date="1586865600">- Update to 68.7.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.8.0-1" date="1588680000">- Update to 68.8.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.9.0-1" date="1591358400">- Update to 68.9.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.10.0-1" date="1594209600">- Update to 68.10.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.11.0-1" date="1596542400">- Update to 68.11.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.12.0-1" date="1599048000">- Update to 68.12.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.2.1-1" date="1599566400">- Update to 78.2.1 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.0-3" date="1600516800">- Update to 78.3.0 build1
- Remove librdp.so as long as we cannot ship it in RHEL</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.1-1" date="1601380800">- Update to 78.3.1 build1</changelog>
</package>
<package pkgid="d215ce5312724ff70e4f0883ee1b849093887b911d3e2483add269d6b6a8f4d1" name="thunderbird" arch="src">
  <version epoch="0" ver="78.4.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.7.0-1" date="1586865600">- Update to 68.7.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.8.0-1" date="1588680000">- Update to 68.8.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.9.0-1" date="1591358400">- Update to 68.9.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.10.0-1" date="1594209600">- Update to 68.10.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.11.0-1" date="1596542400">- Update to 68.11.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.12.0-1" date="1599048000">- Update to 68.12.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.2.1-1" date="1599566400">- Update to 78.2.1 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.0-3" date="1600516800">- Update to 78.3.0 build1
- Remove librdp.so as long as we cannot ship it in RHEL</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.1-1" date="1601380800">- Update to 78.3.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.0-1" date="1603281600">- Update to 78.4.0 build1
- Disabled telemetry</changelog>
</package>
<package pkgid="c4a8036972f3c1e406f19b7c983f442adf823e540e05cad7ff55d520ee038f6f" name="thunderbird" arch="src">
  <version epoch="0" ver="78.4.3" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.8.0-1" date="1588680000">- Update to 68.8.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.9.0-1" date="1591358400">- Update to 68.9.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.10.0-1" date="1594209600">- Update to 68.10.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.11.0-1" date="1596542400">- Update to 68.11.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.12.0-1" date="1599048000">- Update to 68.12.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.2.1-1" date="1599566400">- Update to 78.2.1 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.0-3" date="1600516800">- Update to 78.3.0 build1
- Remove librdp.so as long as we cannot ship it in RHEL</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.1-1" date="1601380800">- Update to 78.3.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.0-1" date="1603281600">- Update to 78.4.0 build1
- Disabled telemetry</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.3-1" date="1605182400">- Update to 78.4.3</changelog>
</package>
<package pkgid="942d9cbddfe0666c8bcab85cca831223e72445fe86d98ace60a63fd4976d1e07" name="thunderbird" arch="src">
  <version epoch="0" ver="78.5.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.9.0-1" date="1591358400">- Update to 68.9.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.10.0-1" date="1594209600">- Update to 68.10.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.11.0-1" date="1596542400">- Update to 68.11.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.12.0-1" date="1599048000">- Update to 68.12.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.2.1-1" date="1599566400">- Update to 78.2.1 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.0-3" date="1600516800">- Update to 78.3.0 build1
- Remove librdp.so as long as we cannot ship it in RHEL</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.1-1" date="1601380800">- Update to 78.3.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.0-1" date="1603281600">- Update to 78.4.0 build1
- Disabled telemetry</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.3-1" date="1605182400">- Update to 78.4.3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.5.0-1" date="1605700800">- Update to 78.5.0 build3</changelog>
</package>
<package pkgid="8ac1e349ea27f818c12a7d9d74e8869651c39ed0a85fc5d49ac0379f0fc98804" name="thunderbird" arch="src">
  <version epoch="0" ver="78.5.1" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.10.0-1" date="1594209600">- Update to 68.10.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.11.0-1" date="1596542400">- Update to 68.11.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.12.0-1" date="1599048000">- Update to 68.12.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.2.1-1" date="1599566400">- Update to 78.2.1 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.0-3" date="1600516800">- Update to 78.3.0 build1
- Remove librdp.so as long as we cannot ship it in RHEL</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.1-1" date="1601380800">- Update to 78.3.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.0-1" date="1603281600">- Update to 78.4.0 build1
- Disabled telemetry</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.3-1" date="1605182400">- Update to 78.4.3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.5.0-1" date="1605700800">- Update to 78.5.0 build3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.5.1-1" date="1607083200">- Update to 78.5.1 build1</changelog>
</package>
<package pkgid="077a354743ecbf0b5dac326b905219e4da91d5c3d2940028bfa918fdaec91a28" name="thunderbird" arch="src">
  <version epoch="0" ver="78.6.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.11.0-1" date="1596542400">- Update to 68.11.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.12.0-1" date="1599048000">- Update to 68.12.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.2.1-1" date="1599566400">- Update to 78.2.1 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.0-3" date="1600516800">- Update to 78.3.0 build1
- Remove librdp.so as long as we cannot ship it in RHEL</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.1-1" date="1601380800">- Update to 78.3.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.0-1" date="1603281600">- Update to 78.4.0 build1
- Disabled telemetry</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.3-1" date="1605182400">- Update to 78.4.3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.5.0-1" date="1605700800">- Update to 78.5.0 build3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.5.1-1" date="1607083200">- Update to 78.5.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.6.0-1" date="1608033600">- Update to 78.6.0</changelog>
</package>
<package pkgid="940a8f09608c518b8d8576401099b9c0bf52544207a38d5c2da8fd8ff6a56d35" name="thunderbird" arch="src">
  <version epoch="0" ver="78.6.1" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 68.12.0-1" date="1599048000">- Update to 68.12.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.2.1-1" date="1599566400">- Update to 78.2.1 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.0-3" date="1600516800">- Update to 78.3.0 build1
- Remove librdp.so as long as we cannot ship it in RHEL</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.1-1" date="1601380800">- Update to 78.3.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.0-1" date="1603281600">- Update to 78.4.0 build1
- Disabled telemetry</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.3-1" date="1605182400">- Update to 78.4.3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.5.0-1" date="1605700800">- Update to 78.5.0 build3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.5.1-1" date="1607083200">- Update to 78.5.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.6.0-1" date="1608033600">- Update to 78.6.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.6.1-1" date="1610452800">- Update to 78.6.1</changelog>
</package>
<package pkgid="8dfac9ca46007e018563efb39439909589465018f6a991134df8bcacf2664512" name="thunderbird" arch="src">
  <version epoch="0" ver="78.7.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.2.1-1" date="1599566400">- Update to 78.2.1 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.0-3" date="1600516800">- Update to 78.3.0 build1
- Remove librdp.so as long as we cannot ship it in RHEL</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.1-1" date="1601380800">- Update to 78.3.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.0-1" date="1603281600">- Update to 78.4.0 build1
- Disabled telemetry</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.3-1" date="1605182400">- Update to 78.4.3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.5.0-1" date="1605700800">- Update to 78.5.0 build3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.5.1-1" date="1607083200">- Update to 78.5.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.6.0-1" date="1608033600">- Update to 78.6.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.6.1-1" date="1610452800">- Update to 78.6.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.0-1" date="1611662400">- Update to 78.7.0</changelog>
</package>
<package pkgid="904e0f37fec6f39b02f3950fe9da19db927581bac221a170213eac9d7cd4a352" name="thunderbird" arch="src">
  <version epoch="0" ver="78.8.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.0-3" date="1600516800">- Update to 78.3.0 build1
- Remove librdp.so as long as we cannot ship it in RHEL</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.3.1-1" date="1601380800">- Update to 78.3.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.0-1" date="1603281600">- Update to 78.4.0 build1
- Disabled telemetry</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.3-1" date="1605182400">- Update to 78.4.3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.5.0-1" date="1605700800">- Update to 78.5.0 build3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.5.1-1" date="1607083200">- Update to 78.5.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.6.0-1" date="1608033600">- Update to 78.6.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.6.1-1" date="1610452800">- Update to 78.6.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.0-1" date="1611662400">- Update to 78.7.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.8.0-1" date="1613736000">- Update to 78.8.0 build1</changelog>
</package>
<package pkgid="03f36bcff7579eb4a381f7519ea3aa8621049dae1cb1a1f355097a9b5dd005c0" name="thunderbird" arch="src">
  <version epoch="0" ver="78.9.0" rel="3.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.4.3-1" date="1605182400">- Update to 78.4.3</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.5.0-1" date="1605700800">- Update to 78.5.0 build3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.5.1-1" date="1607083200">- Update to 78.5.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.6.0-1" date="1608033600">- Update to 78.6.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.6.1-1" date="1610452800">- Update to 78.6.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.0-1" date="1611662400">- Update to 78.7.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.8.0-1" date="1613736000">- Update to 78.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-1" date="1616414400">- Update to 78.9.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-2" date="1616414401">- Update to 78.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-3" date="1616500800">- Update to 78.9.0 build2, updated langpacks</changelog>
</package>
<package pkgid="d1a4502863078d4f71aa657a139a9e5e6ab7860c8ef1d1ad723336897f9d8268" name="thunderbird" arch="src">
  <version epoch="0" ver="78.9.1" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.5.0-1" date="1605700800">- Update to 78.5.0 build3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.5.1-1" date="1607083200">- Update to 78.5.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.6.0-1" date="1608033600">- Update to 78.6.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.6.1-1" date="1610452800">- Update to 78.6.1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.7.0-1" date="1611662400">- Update to 78.7.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.8.0-1" date="1613736000">- Update to 78.8.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-1" date="1616414400">- Update to 78.9.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-2" date="1616414401">- Update to 78.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.0-3" date="1616500800">- Update to 78.9.0 build2, updated langpacks</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.9.1-1" date="1618228800">- Update to 78.9.1</changelog>
</package>
<package pkgid="b6f06cf99f594c3dc9290721ec3f02acc4ec80bc878870ecd97a5ccc40636709" name="thunderbird" arch="src">
  <version epoch="0" ver="91.10.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.5.0-1" date="1641556800">- Update to 91.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.6.0-1" date="1644235200">- Update to 91.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-1" date="1646308800">- Update to 91.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-2" date="1646740800">- Update to 91.7.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.8.0-1" date="1649160000">- Update to 91.8.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-1" date="1651147200">- Update to 91.9.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-2" date="1651492800">- Update to 91.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-3" date="1651579200">- Update to 91.9.0 build3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.9.1-1" date="1653307200">- Update to 91.9.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.10.0-1" date="1653912000">- Update to 91.10.0 build1</changelog>
</package>
<package pkgid="ad5d2a364cc1f3289584796c6b99bb6e37a1b99424b241a57948159d485483bf" name="thunderbird" arch="src">
  <version epoch="0" ver="91.11.0" rel="2.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-1" date="1646308800">- Update to 91.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-2" date="1646740800">- Update to 91.7.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.8.0-1" date="1649160000">- Update to 91.8.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-1" date="1651147200">- Update to 91.9.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-2" date="1651492800">- Update to 91.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-3" date="1651579200">- Update to 91.9.0 build3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.9.1-1" date="1653307200">- Update to 91.9.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.10.0-1" date="1653912000">- Update to 91.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-1" date="1655985600">- Update to 91.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-2" date="1656417600">- Update to 91.11.0 build2</changelog>
</package>
<package pkgid="c7cb84f3b50bda283af1cfe2ad0689c698483e9d2a51324dbaba8e11eaa4c71e" name="thunderbird" arch="src">
  <version epoch="0" ver="91.12.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-2" date="1646740800">- Update to 91.7.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.8.0-1" date="1649160000">- Update to 91.8.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-1" date="1651147200">- Update to 91.9.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-2" date="1651492800">- Update to 91.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-3" date="1651579200">- Update to 91.9.0 build3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.9.1-1" date="1653307200">- Update to 91.9.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.10.0-1" date="1653912000">- Update to 91.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-1" date="1655985600">- Update to 91.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-2" date="1656417600">- Update to 91.11.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.12.0-1" date="1658750400">- Update to 91.12.0 build1</changelog>
</package>
<package pkgid="ee31bfec911dbae6c39a2807e826f823a5dae40a33d42c5dd65113a0e5d2d710" name="thunderbird" arch="src">
  <version epoch="0" ver="91.13.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.8.0-1" date="1649160000">- Update to 91.8.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-1" date="1651147200">- Update to 91.9.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-2" date="1651492800">- Update to 91.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-3" date="1651579200">- Update to 91.9.0 build3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.9.1-1" date="1653307200">- Update to 91.9.1 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.10.0-1" date="1653912000">- Update to 91.10.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-1" date="1655985600">- Update to 91.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.11.0-2" date="1656417600">- Update to 91.11.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.12.0-1" date="1658750400">- Update to 91.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.13.0-1" date="1660910400">- Update to 91.13.0 build1</changelog>
</package>
<package pkgid="9801b0586a65229e5606df84ae40dba0882b9cb200da2b1f7e956f262ec4d412" name="thunderbird" arch="src">
  <version epoch="0" ver="91.2.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.11.0-1" date="1622462400">- Update to 78.11.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.12.0-1" date="1625745600">- Update to 78.12.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.12.0-2" date="1626091200">- Update to 78.12.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.12.0-3" date="1626436800">- Rebuild to pickup older nss</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.13.0-1" date="1628078400">- Update to 78.13.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.13.0-2" date="1629115200">- Use the right name for the appstream file</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.14.0-1" date="1630584000">- Update to 78.14.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.1.0-1" date="1631016000">- Update to 91.1.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.1.2-1" date="1632916800">- Update to 91.1.2 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.2.0-1" date="1633348800">- Update to 91.2.0 build1</changelog>
</package>
<package pkgid="5ff9aa37095a07a17bd46559e4aa61376b4b27663eb1ae916a54a524cb6a1a94" name="thunderbird" arch="src">
  <version epoch="0" ver="91.3.0" rel="2.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.12.0-2" date="1626091200">- Update to 78.12.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.12.0-3" date="1626436800">- Rebuild to pickup older nss</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.13.0-1" date="1628078400">- Update to 78.13.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.13.0-2" date="1629115200">- Use the right name for the appstream file</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.14.0-1" date="1630584000">- Update to 78.14.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.1.0-1" date="1631016000">- Update to 91.1.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.1.2-1" date="1632916800">- Update to 91.1.2 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.2.0-1" date="1633348800">- Update to 91.2.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.3.0-1" date="1635768000">- Update to 91.3.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.3.0-2" date="1635854400">- Update to 19.3.0 build2</changelog>
</package>
<package pkgid="e879c66ea3567f50a2785c353c50566e9d89b03e71af0c1e4fb2d2f154c5a1c7" name="thunderbird" arch="src">
  <version epoch="0" ver="91.4.0" rel="3.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 78.13.0-2" date="1629115200">- Use the right name for the appstream file</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.14.0-1" date="1630584000">- Update to 78.14.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.1.0-1" date="1631016000">- Update to 91.1.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.1.2-1" date="1632916800">- Update to 91.1.2 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.2.0-1" date="1633348800">- Update to 91.2.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.3.0-1" date="1635768000">- Update to 91.3.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.3.0-2" date="1635854400">- Update to 91.3.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-1" date="1638360000">- Update to 91.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-2" date="1638792000">- Update to 91.4.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-3" date="1638878400">- Bump NVR for ppc64 build</changelog>
</package>
<package pkgid="b78833a08472683d46fce48b31432c1b7f8136dfa9f27663a40da566726eb953" name="thunderbird" arch="src">
  <version epoch="0" ver="91.5.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 78.14.0-1" date="1630584000">- Update to 78.14.0 build1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.1.0-1" date="1631016000">- Update to 91.1.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.1.2-1" date="1632916800">- Update to 91.1.2 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.2.0-1" date="1633348800">- Update to 91.2.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.3.0-1" date="1635768000">- Update to 91.3.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.3.0-2" date="1635854400">- Update to 91.3.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-1" date="1638360000">- Update to 91.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-2" date="1638792000">- Update to 91.4.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-3" date="1638878400">- Bump NVR for ppc64 build</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.5.0-1" date="1641556800">- Update to 91.5.0 build1</changelog>
</package>
<package pkgid="e53c65660553fd7cbdaaf1395738d599e290940735e1ae8a25dbdc95f8a415f1" name="thunderbird" arch="src">
  <version epoch="0" ver="91.6.0" rel="1.el7_9"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.1.0-1" date="1631016000">- Update to 91.1.0 build2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.1.2-1" date="1632916800">- Update to 91.1.2 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.2.0-1" date="1633348800">- Update to 91.2.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.3.0-1" date="1635768000">- Update to 91.3.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.3.0-2" date="1635854400">- Update to 91.3.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-1" date="1638360000">- Update to 91.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-2" date="1638792000">- Update to 91.4.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-3" date="1638878400">- Bump NVR for ppc64 build</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.5.0-1" date="1641556800">- Update to 91.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.6.0-1" date="1644235200">- Update to 91.6.0 build1</changelog>
</package>
<package pkgid="3e2d362b17513b0b1be507b5d155d7420c29804c80d12320098cab84300f7870" name="thunderbird" arch="src">
  <version epoch="0" ver="91.7.0" rel="2.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.2.0-1" date="1633348800">- Update to 91.2.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.3.0-1" date="1635768000">- Update to 91.3.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.3.0-2" date="1635854400">- Update to 91.3.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-1" date="1638360000">- Update to 91.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-2" date="1638792000">- Update to 91.4.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-3" date="1638878400">- Bump NVR for ppc64 build</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.5.0-1" date="1641556800">- Update to 91.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.6.0-1" date="1644235200">- Update to 91.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-1" date="1646308800">- Update to 91.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-2" date="1646740800">- Update to 91.7.0 build2</changelog>
</package>
<package pkgid="bfd0d4cd467c6fcfbfd2c7dde4c35cdf46a50c465fa2c9d9b9d92b6719461032" name="thunderbird" arch="src">
  <version epoch="0" ver="91.8.0" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.3.0-1" date="1635768000">- Update to 91.3.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.3.0-2" date="1635854400">- Update to 91.3.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-1" date="1638360000">- Update to 91.4.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-2" date="1638792000">- Update to 91.4.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-3" date="1638878400">- Bump NVR for ppc64 build</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.5.0-1" date="1641556800">- Update to 91.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.6.0-1" date="1644235200">- Update to 91.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-1" date="1646308800">- Update to 91.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-2" date="1646740800">- Update to 91.7.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.8.0-1" date="1649160000">- Update to 91.8.0</changelog>
</package>
<package pkgid="002944983d3f365916c31b4dd7075a37db89f20487ffcc30e0f5dfbfad9f312c" name="thunderbird" arch="src">
  <version epoch="0" ver="91.9.0" rel="3.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-2" date="1638792000">- Update to 91.4.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-3" date="1638878400">- Bump NVR for ppc64 build</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.5.0-1" date="1641556800">- Update to 91.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.6.0-1" date="1644235200">- Update to 91.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-1" date="1646308800">- Update to 91.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-2" date="1646740800">- Update to 91.7.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.8.0-1" date="1649160000">- Update to 91.8.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-1" date="1651147200">- Update to 91.9.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-2" date="1651492800">- Update to 91.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-3" date="1651579200">- Update to 91.9.0 build3</changelog>
</package>
<package pkgid="6e2b56feee23bf6307786bee42f83a158ec7933776144e8de77c5c1b50d831d6" name="thunderbird" arch="src">
  <version epoch="0" ver="91.9.1" rel="1.el7_9"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.4.0-2" date="1638792000">- Update to 91.4.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.5.0-1" date="1641556800">- Update to 91.5.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.6.0-1" date="1644235200">- Update to 91.6.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-1" date="1646308800">- Update to 91.7.0 build1</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.7.0-2" date="1646740800">- Update to 91.7.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.8.0-1" date="1649160000">- Update to 91.8.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-1" date="1651147200">- Update to 91.9.0</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-2" date="1651492800">- Update to 91.9.0 build2</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 91.9.0-3" date="1651579200">- Update to 91.9.0 build3</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 91.9.1-1" date="1653307200">- Update to 91.9.1 build1</changelog>
</package>
<package pkgid="c58abd3363bf916118044f98fd3a4c3544b9aba686b8086499eb9a42f119be73" name="tigervnc" arch="src">
  <version epoch="0" ver="1.8.0" rel="22.el7"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-13" date="1535544000">- Add one remaining option to Xvnc manpage
  Resolves: bz#1601880</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-14" date="1547467200">- Fix rendering on big endian system
  Resolves: bz#1618777

  Do not automatically kill sessions
  Resolves: bz#1646889</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-15" date="1547467201">- Reduce size of context menu hint
  Resolves: bz#1491608</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-16" date="1548072000">- Automatically kill session only when gnome or kde is installed
  Resolves: bz#1646889</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-17" date="1550491200">- Release pointer grab when cursor leaves window
  Resolves: bz#1664801</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.8.0-18" date="1565697600">- Rebuild against newer X server to pick up backing store crash fixes
  Resolves: bz#1670342</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-19" date="1570708800">- Use vncserver wrapper script to workaround systemd issues
  Resolves: bz#1747191</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-20" date="1582286400">- Fix stack buffer overflow in CMsgReader::readSetCursor
  Resolves: bz#1791773

- Fix heap buffer overflow in DecodeManager::decodeRect
  Resolves: bz#1791768

- Fix heap buffer overflow in TightDecoder::FilterGradient
  Resolves: bz#1791763

- Fix heap-based buffer overflow triggered from CopyRectDecoder
  Resolves: bz#1791747

- Fix stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder
  Resolves: bz#1791759

- Add option to fallback to empty port when the specified one is taken
  Resolves: bz#1791996</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-21" date="1587556800">- Add upstream patch needed because of previous security fixes
  Resolves: bz#1826822</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-22" date="1594296000">- Region handling refresh
  Resolves: bz#1753158</changelog>
</package>
<package pkgid="e6ef4da61ef6b654f3cbfd12fec6392cab8913ebf6007a5c56511ecd64431497" name="tigervnc" arch="src">
  <version epoch="0" ver="1.8.0" rel="23.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-14" date="1547467200">- Fix rendering on big endian system
  Resolves: bz#1618777

  Do not automatically kill sessions
  Resolves: bz#1646889</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-15" date="1547467201">- Reduce size of context menu hint
  Resolves: bz#1491608</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-16" date="1548072000">- Automatically kill session only when gnome or kde is installed
  Resolves: bz#1646889</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-17" date="1550491200">- Release pointer grab when cursor leaves window
  Resolves: bz#1664801</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.8.0-18" date="1565697600">- Rebuild against newer X server to pick up backing store crash fixes
  Resolves: bz#1670342</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-19" date="1570708800">- Use vncserver wrapper script to workaround systemd issues
  Resolves: bz#1747191</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-20" date="1582286400">- Fix stack buffer overflow in CMsgReader::readSetCursor
  Resolves: bz#1791773

- Fix heap buffer overflow in DecodeManager::decodeRect
  Resolves: bz#1791768

- Fix heap buffer overflow in TightDecoder::FilterGradient
  Resolves: bz#1791763

- Fix heap-based buffer overflow triggered from CopyRectDecoder
  Resolves: bz#1791747

- Fix stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder
  Resolves: bz#1791759

- Add option to fallback to empty port when the specified one is taken
  Resolves: bz#1791996</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-21" date="1587556800">- Add upstream patch needed because of previous security fixes
  Resolves: bz#1826822</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-22" date="1594296000">- Region handling refresh
  Resolves: bz#1753158</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-23" date="1671192000">- Rebuild for xorg-x11-server CVEs
  Resolves: CVE-2022-4283 (bz#2154267)
  Resolves: CVE-2022-46340 (bz#2154261)
  Resolves: CVE-2022-46341 (bz#2154264)
  Resolves: CVE-2022-46342 (bz#2154262)
  Resolves: CVE-2022-46343 (bz#2154265)
  Resolves: CVE-2022-46344 (bz#2154266)</changelog>
</package>
<package pkgid="753983c0f789c42aa53e601184b11d590fdbf512195fb7ce82a7b3f51635fddb" name="tigervnc" arch="src">
  <version epoch="0" ver="1.8.0" rel="24.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-15" date="1547467200">- Reduce size of context menu hint
  Resolves: bz#1491608</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-16" date="1548072000">- Automatically kill session only when gnome or kde is installed
  Resolves: bz#1646889</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-17" date="1550491200">- Release pointer grab when cursor leaves window
  Resolves: bz#1664801</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.8.0-18" date="1565697600">- Rebuild against newer X server to pick up backing store crash fixes
  Resolves: bz#1670342</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-19" date="1570708800">- Use vncserver wrapper script to workaround systemd issues
  Resolves: bz#1747191</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-20" date="1582286400">- Fix stack buffer overflow in CMsgReader::readSetCursor
  Resolves: bz#1791773

- Fix heap buffer overflow in DecodeManager::decodeRect
  Resolves: bz#1791768

- Fix heap buffer overflow in TightDecoder::FilterGradient
  Resolves: bz#1791763

- Fix heap-based buffer overflow triggered from CopyRectDecoder
  Resolves: bz#1791747

- Fix stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder
  Resolves: bz#1791759

- Add option to fallback to empty port when the specified one is taken
  Resolves: bz#1791996</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-21" date="1587556800">- Add upstream patch needed because of previous security fixes
  Resolves: bz#1826822</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-22" date="1594296000">- Region handling refresh
  Resolves: bz#1753158</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-23" date="1671192000">- Rebuild for xorg-x11-server CVEs
  Resolves: CVE-2022-4283 (bz#2154267)
  Resolves: CVE-2022-46340 (bz#2154261)
  Resolves: CVE-2022-46341 (bz#2154264)
  Resolves: CVE-2022-46342 (bz#2154262)
  Resolves: CVE-2022-46343 (bz#2154265)
  Resolves: CVE-2022-46344 (bz#2154266)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-24" date="1675425600">- CVE fix for: CVE-2023-0494
  Resolves: bz#2166532</changelog>
</package>
<package pkgid="7f982d789d049162a956558fbfbd42b51690904e8c64f62861743cc627457c35" name="tigervnc" arch="src">
  <version epoch="0" ver="1.8.0" rel="25.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-16" date="1548072000">- Automatically kill session only when gnome or kde is installed
  Resolves: bz#1646889</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-17" date="1550491200">- Release pointer grab when cursor leaves window
  Resolves: bz#1664801</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.8.0-18" date="1565697600">- Rebuild against newer X server to pick up backing store crash fixes
  Resolves: bz#1670342</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-19" date="1570708800">- Use vncserver wrapper script to workaround systemd issues
  Resolves: bz#1747191</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-20" date="1582286400">- Fix stack buffer overflow in CMsgReader::readSetCursor
  Resolves: bz#1791773

- Fix heap buffer overflow in DecodeManager::decodeRect
  Resolves: bz#1791768

- Fix heap buffer overflow in TightDecoder::FilterGradient
  Resolves: bz#1791763

- Fix heap-based buffer overflow triggered from CopyRectDecoder
  Resolves: bz#1791747

- Fix stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder
  Resolves: bz#1791759

- Add option to fallback to empty port when the specified one is taken
  Resolves: bz#1791996</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-21" date="1587556800">- Add upstream patch needed because of previous security fixes
  Resolves: bz#1826822</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-22" date="1594296000">- Region handling refresh
  Resolves: bz#1753158</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-23" date="1671192000">- Rebuild for xorg-x11-server CVEs
  Resolves: CVE-2022-4283 (bz#2154267)
  Resolves: CVE-2022-46340 (bz#2154261)
  Resolves: CVE-2022-46341 (bz#2154264)
  Resolves: CVE-2022-46342 (bz#2154262)
  Resolves: CVE-2022-46343 (bz#2154265)
  Resolves: CVE-2022-46344 (bz#2154266)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-24" date="1675425600">- CVE fix for: CVE-2023-0494
  Resolves: bz#2166532</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-25" date="1679918400">- CVE fix for: CVE-2023-1393
  Resolves: bz#2180291</changelog>
</package>
<package pkgid="df2d1630b06b7e5f8aeb5a3ff783005700e8c816230645cebc381833c4b20482" name="tigervnc" arch="src">
  <version epoch="0" ver="1.8.0" rel="26.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-17" date="1550491200">- Release pointer grab when cursor leaves window
  Resolves: bz#1664801</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.8.0-18" date="1565697600">- Rebuild against newer X server to pick up backing store crash fixes
  Resolves: bz#1670342</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-19" date="1570708800">- Use vncserver wrapper script to workaround systemd issues
  Resolves: bz#1747191</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-20" date="1582286400">- Fix stack buffer overflow in CMsgReader::readSetCursor
  Resolves: bz#1791773

- Fix heap buffer overflow in DecodeManager::decodeRect
  Resolves: bz#1791768

- Fix heap buffer overflow in TightDecoder::FilterGradient
  Resolves: bz#1791763

- Fix heap-based buffer overflow triggered from CopyRectDecoder
  Resolves: bz#1791747

- Fix stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder
  Resolves: bz#1791759

- Add option to fallback to empty port when the specified one is taken
  Resolves: bz#1791996</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-21" date="1587556800">- Add upstream patch needed because of previous security fixes
  Resolves: bz#1826822</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-22" date="1594296000">- Region handling refresh
  Resolves: bz#1753158</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-23" date="1671192000">- Rebuild for xorg-x11-server CVEs
  Resolves: CVE-2022-4283 (bz#2154267)
  Resolves: CVE-2022-46340 (bz#2154261)
  Resolves: CVE-2022-46341 (bz#2154264)
  Resolves: CVE-2022-46342 (bz#2154262)
  Resolves: CVE-2022-46343 (bz#2154265)
  Resolves: CVE-2022-46344 (bz#2154266)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-24" date="1675425600">- CVE fix for: CVE-2023-0494
  Resolves: bz#2166532</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-25" date="1679918400">- CVE fix for: CVE-2023-1393
  Resolves: bz#2180291</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-26" date="1698840000">- Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
  Resolves: RHEL-15235
- Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
  Resolves: RHEL-15223</changelog>
</package>
<package pkgid="87fcc4aa355fac4aea64c1b7faa42ea13a4cb87700f3ce50901fb6facee95ff0" name="tigervnc" arch="src">
  <version epoch="0" ver="1.8.0" rel="28.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-19" date="1570708800">- Use vncserver wrapper script to workaround systemd issues
  Resolves: bz#1747191</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-20" date="1582286400">- Fix stack buffer overflow in CMsgReader::readSetCursor
  Resolves: bz#1791773

- Fix heap buffer overflow in DecodeManager::decodeRect
  Resolves: bz#1791768

- Fix heap buffer overflow in TightDecoder::FilterGradient
  Resolves: bz#1791763

- Fix heap-based buffer overflow triggered from CopyRectDecoder
  Resolves: bz#1791747

- Fix stack use-after-return due to incorrect usage of stack memory in ZRLEDecoder
  Resolves: bz#1791759

- Add option to fallback to empty port when the specified one is taken
  Resolves: bz#1791996</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-21" date="1587556800">- Add upstream patch needed because of previous security fixes
  Resolves: bz#1826822</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-22" date="1594296000">- Region handling refresh
  Resolves: bz#1753158</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-23" date="1671192000">- Rebuild for xorg-x11-server CVEs
  Resolves: CVE-2022-4283 (bz#2154267)
  Resolves: CVE-2022-46340 (bz#2154261)
  Resolves: CVE-2022-46341 (bz#2154264)
  Resolves: CVE-2022-46342 (bz#2154262)
  Resolves: CVE-2022-46343 (bz#2154265)
  Resolves: CVE-2022-46344 (bz#2154266)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-24" date="1675425600">- CVE fix for: CVE-2023-0494
  Resolves: bz#2166532</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-25" date="1679918400">- CVE fix for: CVE-2023-1393
  Resolves: bz#2180291</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-26" date="1698840000">- Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
  Resolves: RHEL-15235
- Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
  Resolves: RHEL-15223</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-27" date="1702036800">- Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
  Resolves: RHEL-18415
- CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
  Resolves: RHEL-18427</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-28" date="1702468800">- Updated fix for CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
  Resolves: RHEL-18415</changelog>
</package>
<package pkgid="25143453f1f4dbadb2ed1c0333f8e36720871923654a83ca54ca809232024783" name="tigervnc" arch="src">
  <version epoch="0" ver="1.8.0" rel="31.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-22" date="1594296000">- Region handling refresh
  Resolves: bz#1753158</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-23" date="1671192000">- Rebuild for xorg-x11-server CVEs
  Resolves: CVE-2022-4283 (bz#2154267)
  Resolves: CVE-2022-46340 (bz#2154261)
  Resolves: CVE-2022-46341 (bz#2154264)
  Resolves: CVE-2022-46342 (bz#2154262)
  Resolves: CVE-2022-46343 (bz#2154265)
  Resolves: CVE-2022-46344 (bz#2154266)</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-24" date="1675425600">- CVE fix for: CVE-2023-0494
  Resolves: bz#2166532</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-25" date="1679918400">- CVE fix for: CVE-2023-1393
  Resolves: bz#2180291</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-26" date="1698840000">- Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
  Resolves: RHEL-15235
- Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
  Resolves: RHEL-15223</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-27" date="1702036800">- Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
  Resolves: RHEL-18415
- CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
  Resolves: RHEL-18427</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-28" date="1702468800">- Updated fix for CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
  Resolves: RHEL-18415</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-29" date="1705060800">- Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
  Resolves: RHEL-20436
- Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
  Resolves: RHEL-20427
- Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
  Resolves: RHEL-20587
- Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
  Resolves: RHEL-21212</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-30" date="1705665600">- Don't try to get pointer position when the pointer becomes a floating device
  Resolves: RHEL-20436</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-31" date="1706184000">- Fix use after free related to CVE-2024-21886
  Resolves: RHEL-20436
- Fix copy/paste error in the DeviceStateNotify
  Resolves: RHEL-20587</changelog>
</package>
<package pkgid="52be45035dceb0b2297f9d54f18a9ae092bfb1ec41f0e5d7059c0aa5f6c7c3c3" name="tigervnc" arch="src">
  <version epoch="0" ver="1.8.0" rel="33.el7_9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-24" date="1675425600">- CVE fix for: CVE-2023-0494
  Resolves: bz#2166532</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-25" date="1679918400">- CVE fix for: CVE-2023-1393
  Resolves: bz#2180291</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-26" date="1698840000">- Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
  Resolves: RHEL-15235
- Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
  Resolves: RHEL-15223</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-27" date="1702036800">- Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
  Resolves: RHEL-18415
- CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
  Resolves: RHEL-18427</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-28" date="1702468800">- Updated fix for CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
  Resolves: RHEL-18415</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-29" date="1705060800">- Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
  Resolves: RHEL-20436
- Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
  Resolves: RHEL-20427
- Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
  Resolves: RHEL-20587
- Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
  Resolves: RHEL-21212</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-30" date="1705665600">- Don't try to get pointer position when the pointer becomes a floating device
  Resolves: RHEL-20436</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-31" date="1706184000">- Fix use after free related to CVE-2024-21886
  Resolves: RHEL-20436
- Fix copy/paste error in the DeviceStateNotify
  Resolves: RHEL-20587</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-32" date="1712232000">- Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
  Resolves: RHEL-31006
- Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
  Resolves: RHEL-30976
- Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
  Resolves: RHEL-30993</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.8.0-33" date="1712232001">- Fix crash caused by fix for CVE-2024-31083
  Resolves: RHEL-30976</changelog>
</package>
<package pkgid="b8483322e5ce82f56923c826e29301afc165b21d4fcefaddcdc71ecd9f1cbcaa" name="tomcat" arch="src">
  <version epoch="0" ver="7.0.76" rel="16.el7_9"/>
  <changelog author="Jean-Frederic Clere &lt;jclere@redhat.com&gt; 0:7.0.76-7" date="1532433600">- Resolves: rhbz#1602060 Deadlock occurs while sending to a closing session</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-8" date="1539345600">- Resolves: rhbz#1608607 CVE-2018-1336 tomcat: A bug in the UTF 8 decoder can lead to DoS</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-9" date="1549972800">- Resolves: rhbz#1641873 CVE-2018-11784 tomcat: Open redirect in default servlet
- Resolves: rhbz#1552375 CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources
- Resolves: rhbz#1552374 CVE-2018-1305 tomcat: Late application of security constraints can lead to resource exposure for unauthorised users
- Resolves: rhbz#1590182 CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins
- Resolves: rhbz#1608609 CVE-2018-8034 tomcat: host name verification missing in WebSocket client
- Resolves: rhbz#1588703 Backport of Negative maxCookieCount value causes exception for Tomcat
- Resolves: rhbz#1472950 shutdown_wait option is not working for Tomcat
- Resolves: rhbz#1455483 Add support for characters "&lt;" and "&gt;" to the possible whitelist values</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-10" date="1567512000">- Resolves: rhbz#1748541 Bump tomcat release number</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-11" date="1583236800">- CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-12" date="1587729600">- Resolves: rhbz#1367492 harden package permissions
- Resolves: rhbz#1523112 tomcat systemd does not cope with - in service names
- Resolves: rhbz#1629162 tomcat-dbcp.jar is missing from tomcat package
- Resolves: rhbz#1822453 Tomcat parses a request having an absolute URI path incorrectly and returns 404 Not Found
- Resolves: rhbz#1795645 connection leak with StatementCache, SlowQueryReport or StatementDecoratorInterceptor
- Resolves: CVE-2019-17563 tomcat: session fixation when using FORM authentication</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-13" date="1588766400">- Revert rhbz#1367492 because it caused issues with ipa-server, see rhbz#1831127</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-14" date="1590062400">- Revert rhbz#1814315 because it caused other issues with ipa-server, see rhbz#1831127
- Resolves: CVE-2020-9484 tomcat: Apache Tomcat Remote Code Execution via session persistence</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; 0:7.0.76-15" date="1594987200">- Resolves: CVE-2020-13935 tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS</changelog>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; 0:7.0.76-16" date="1600862400">- Resolves: rhbz#1814315 CVE-2020-1935 tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling</changelog>
</package>
<package pkgid="08540f72125f7b93d14582305ab9dc2371c5654070600b03a17a7c9f5dcb8ebc" name="tuned" arch="src">
  <version epoch="0" ver="2.11.0" rel="10.el7"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-1" date="1553169600">- new release
  - rebased tuned to latest upstream
    related: rhbz#1643654
  - used dmidecode only on x86 architectures
    resolves: rhbz#1688371
  - recommend: fixed to work without tuned daemon running
    resolves: rhbz#1687397</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-6" date="1564488000">- sap-hana-vmware: deprecated profile
  Resolves: rhbz#1672213</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-7" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739418</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-8" date="1565784000">- realtime-virtual-guest/host: enabled ktimer-lockless-check
  Resolves: rhbz#1730016</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-9" date="1583409600">- Fixed SIGHUP handling
  Resolves: rhbz#1702724
- Tune irqbalance service
  Resolves: rhbz#1720042
- Added netcat requirement
  Resolves: rhbz#1746436
- sysctl: made reapply_sysctl ignore configs from /usr
  Resolves: rhbz#1776149
- profiles: define variables before use
  Resolves: rhbz#1781664</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-10" date="1597233600">- realtime-virtual-host: remove lapic advancement calculation and
  related qemu-kvm-tools-rhev requirement
  Resolves: rhbz#1852253</changelog>
</package>
<package pkgid="5d2ef77fddb02739ecd1a7c8559e01f9d470c65e64c3677c093ac0938712052e" name="tuned" arch="src">
  <version epoch="0" ver="2.11.0" rel="11.el7_9"/>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-2" date="1556193600">- Fix setting force_latency in the virtual-host profile
- Resolves: rhbz#1569375</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-6" date="1564488000">- sap-hana-vmware: deprecated profile
  Resolves: rhbz#1672213</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-7" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739418</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-8" date="1565784000">- realtime-virtual-guest/host: enabled ktimer-lockless-check
  Resolves: rhbz#1730016</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-9" date="1583409600">- Fixed SIGHUP handling
  Resolves: rhbz#1702724
- Tune irqbalance service
  Resolves: rhbz#1720042
- Added netcat requirement
  Resolves: rhbz#1746436
- sysctl: made reapply_sysctl ignore configs from /usr
  Resolves: rhbz#1776149
- profiles: define variables before use
  Resolves: rhbz#1781664</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-10" date="1597233600">- realtime-virtual-host: remove lapic advancement calculation and
  related qemu-kvm-tools-rhev requirement
  Resolves: rhbz#1852253</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-11" date="1607947200">- sap-netweaver: Use static values for kernel.shmall and kernel.shmmax
  Resolves: rhbz#1904984</changelog>
</package>
<package pkgid="9e7737b6c5368553f87762a27d353674048672435467f2fdc9c2649a605f2207" name="tuned" arch="src">
  <version epoch="0" ver="2.11.0" rel="12.el7_9"/>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-3" date="1557835200">- Fixed assertion that isolated_cores contain online CPUs
- Resolves: rhbz#1706171</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-4" date="1558094400">- Fixed verification of sysctl parameters whose values contain tabs
- Resolves: rhbz#1711230</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.11.0-5" date="1559908800">- Ignore non-existent settings from system sysctl configs
- Resolves: rhbz#1714595</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-6" date="1564488000">- sap-hana-vmware: deprecated profile
  Resolves: rhbz#1672213</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-7" date="1565352000">- plugin_sysctl: fixed traceback when assignments modifiers ('&lt;', '&gt;')
  are used with sysctl and the current sysctl value is the same as
  the new value
  Resolves: rhbz#1739418</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-8" date="1565784000">- realtime-virtual-guest/host: enabled ktimer-lockless-check
  Resolves: rhbz#1730016</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-9" date="1583409600">- Fixed SIGHUP handling
  Resolves: rhbz#1702724
- Tune irqbalance service
  Resolves: rhbz#1720042
- Added netcat requirement
  Resolves: rhbz#1746436
- sysctl: made reapply_sysctl ignore configs from /usr
  Resolves: rhbz#1776149
- profiles: define variables before use
  Resolves: rhbz#1781664</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-10" date="1597233600">- realtime-virtual-host: remove lapic advancement calculation and
  related qemu-kvm-tools-rhev requirement
  Resolves: rhbz#1852253</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-11" date="1607947200">- sap-netweaver: Use static values for kernel.shmall and kernel.shmmax
  Resolves: rhbz#1904984</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.11.0-12" date="1659009600">- disk: added support for the nvme devices
  Resolves: rhbz#1981618</changelog>
</package>
<package pkgid="511b19d4164045ebe6ea471b587a41b18d6370969fc2e9846bf704586261bb0a" name="tzdata" arch="src">
  <version epoch="0" ver="2020b" rel="3.el7"/>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018f-1" date="1539864000">- Europe/Volgograd will change from UTC+3 to UTC+4 on October 28,2018.
- Add patch to remove use of 25:00.
- Drop previous change to DST in Brazil.  The government rescinded the
  change.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018g-1" date="1540814400">- Rebase to tzdata-2018g
  - Morocco will remain at UTC+1 rather than switching back to UTC+0 as
    planned.  This change is effective Octobober 28, 2018.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;pfrankli@redhat.com&gt; - 2018i-1" date="1546430400">- Rebase to tzdata-2018i (includes changes from tzdata-2018h)
  - São Tomé and Príncipe changed from UTC+01 to UTC+00 on 2019-01-01.
  - Qyzylorda, Kazakhstan changed from UTC+06 to UTC+05 on 2018-12-21.
  - Created a new zone Asia/Qostanay since Qostanay, Kazakhstan didn't 
    transition with the Qyzylorda change.
  - Metlakatla, Alaska will observe PST for this winter only.
  - Predict that Morocco will continue to adjust clocks around Ramadan.
  - Also include predictions for Iran from 2038 through 2090.</changelog>
  <changelog author="Patsy Griffin Franklin &lt;patsy@redhat.com&gt; - 2019a-1" date="1553601600">- Rebase to tzdata-2019a
  - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
    previously predicted.
  - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
    of Pacific standard time.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-1" date="1561982400">- Rebase to tzdata-2019b
  - Brazil will no longer observe DST going forward.
  - The 2019 spring transition for Palestine occurred 03-29, not 03-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019c-1" date="1568203200">- Rebase to tzdata-2019c
  - Fiji will observe DST from 2019-11-10 to 2020-01-12.
  - Norfolk Island will begin observing Australian-style DST on 2019-10-06.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020a-1" date="1587729600">- Rebase to tzdata-2020a
  - Morocco will spring forward on 2020-05-31 rather than
    previously predicted 2020-05-24.
  - Canada's Yukon region changed to year round UTC -07
    effective 2020-03-08.
  - America/Godthab was renamed to America/Nuuk.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020b-1" date="1602072000">- Rebase to tzdata-2020b
  - Yukon timezones represented by America/Whitehorse and
    America/Dawson will change time zone rules from -08/-07 to
    permanent -07 on 2020-11-01, not on 2020-03-08 as 2020a had it.
  - The most recent winter(+08)/summer(+11) transition for Casey Station,
    Antarctica was 2020-10-04 00:01.
  - Remove obsolete files pacificnew, systemv, and yearistype.sh
    from the distribution.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020b-2" date="1602244800">- Need to rebuild, bump the release.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020b-3" date="1602590400">- Include the upstream patch to support pacificnew for java tzupdater.
- Set POSIXRULES macro to continue installing posixrules file.</changelog>
</package>
<package pkgid="d5e1b9bb3d993536d6d0bf6afaede5915e594a7973cfcff3d746ecd3bb5b0d80" name="tzdata" arch="src">
  <version epoch="0" ver="2020d" rel="2.el7"/>
  <changelog author="Patsy Griffin Franklin &lt;patsy@redhat.com&gt; - 2019a-1" date="1553601600">- Rebase to tzdata-2019a
  - Palestine will start DST on 2019-03-30, rather than 2019-03-23 as
    previously predicted.
  - Metlakatla rejoined Alaska time on 2019-01-20, ending its observances
    of Pacific standard time.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-1" date="1561982400">- Rebase to tzdata-2019b
  - Brazil will no longer observe DST going forward.
  - The 2019 spring transition for Palestine occurred 03-29, not 03-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019c-1" date="1568203200">- Rebase to tzdata-2019c
  - Fiji will observe DST from 2019-11-10 to 2020-01-12.
  - Norfolk Island will begin observing Australian-style DST on 2019-10-06.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020a-1" date="1587729600">- Rebase to tzdata-2020a
  - Morocco will spring forward on 2020-05-31 rather than
    previously predicted 2020-05-24.
  - Canada's Yukon region changed to year round UTC -07
    effective 2020-03-08.
  - America/Godthab was renamed to America/Nuuk.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020b-1" date="1602072000">- Rebase to tzdata-2020b
  - Yukon timezones represented by America/Whitehorse and
    America/Dawson will change time zone rules from -08/-07 to
    permanent -07 on 2020-11-01, not on 2020-03-08 as 2020a had it.
  - The most recent winter(+08)/summer(+11) transition for Casey Station,
    Antarctica was 2020-10-04 00:01.
  - Remove obsolete files pacificnew, systemv, and yearistype.sh
    from the distribution.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020b-2" date="1602244800">- Need to rebuild, bump the release.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020b-3" date="1602590400">- Include the upstream patch to support pacificnew for java tzupdater.
- Set POSIXRULES macro to continue installing posixrules file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020c-1" date="1603108800">- Rebase to tzdata-2020c
  - Fiji starts DST later than usual, on 2020-12-20.
  - Rearguard now provides an empty file pacificnew to support
    downstream software that expects it.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020d-1" date="1603281600">- Rebase to tzdata-2020d
 - Palestine will end summer time on 2020-10-24 rather than the
   predicted 2020-10-31.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020d-2" date="1603281601">- Update release and rebuild.</changelog>
</package>
<package pkgid="3ee12d5152b84d08e199ec5e34e0491965f4d480f36383b06d35f1fda767d83c" name="tzdata" arch="src">
  <version epoch="0" ver="2020f" rel="1.el7"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019b-1" date="1561982400">- Rebase to tzdata-2019b
  - Brazil will no longer observe DST going forward.
  - The 2019 spring transition for Palestine occurred 03-29, not 03-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019c-1" date="1568203200">- Rebase to tzdata-2019c
  - Fiji will observe DST from 2019-11-10 to 2020-01-12.
  - Norfolk Island will begin observing Australian-style DST on 2019-10-06.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020a-1" date="1587729600">- Rebase to tzdata-2020a
  - Morocco will spring forward on 2020-05-31 rather than
    previously predicted 2020-05-24.
  - Canada's Yukon region changed to year round UTC -07
    effective 2020-03-08.
  - America/Godthab was renamed to America/Nuuk.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020b-1" date="1602072000">- Rebase to tzdata-2020b
  - Yukon timezones represented by America/Whitehorse and
    America/Dawson will change time zone rules from -08/-07 to
    permanent -07 on 2020-11-01, not on 2020-03-08 as 2020a had it.
  - The most recent winter(+08)/summer(+11) transition for Casey Station,
    Antarctica was 2020-10-04 00:01.
  - Remove obsolete files pacificnew, systemv, and yearistype.sh
    from the distribution.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020b-2" date="1602244800">- Need to rebuild, bump the release.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020b-3" date="1602590400">- Include the upstream patch to support pacificnew for java tzupdater.
- Set POSIXRULES macro to continue installing posixrules file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020c-1" date="1603108800">- Rebase to tzdata-2020c
  - Fiji starts DST later than usual, on 2020-12-20.
  - Rearguard now provides an empty file pacificnew to support
    downstream software that expects it.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020d-1" date="1603281600">- Rebase to tzdata-2020d
 - Palestine will end summer time on 2020-10-24 rather than the
   predicted 2020-10-31.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020d-2" date="1603281601">- Update release and rebuild.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020f-1" date="1609243200">- Rebase to tzdata-2020f including changes for tzdata-2020e
  - tzdata-2020f fixes a bug in tzdata-2020e that caused an
    invalid zi file in rearguard format
  - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
  - Australia/Currie is identical to Australia/Hobart for all
    timestamps since 1970 and was therefore created by mistake,
    now moved to the "backward" file.</changelog>
</package>
<package pkgid="604da980a1a481f1c515a78279d0955c0c76cd1ca9202908d8cd09807d81bccc" name="tzdata" arch="src">
  <version epoch="0" ver="2021a" rel="1.el7"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2019c-1" date="1568203200">- Rebase to tzdata-2019c
  - Fiji will observe DST from 2019-11-10 to 2020-01-12.
  - Norfolk Island will begin observing Australian-style DST on 2019-10-06.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020a-1" date="1587729600">- Rebase to tzdata-2020a
  - Morocco will spring forward on 2020-05-31 rather than
    previously predicted 2020-05-24.
  - Canada's Yukon region changed to year round UTC -07
    effective 2020-03-08.
  - America/Godthab was renamed to America/Nuuk.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020b-1" date="1602072000">- Rebase to tzdata-2020b
  - Yukon timezones represented by America/Whitehorse and
    America/Dawson will change time zone rules from -08/-07 to
    permanent -07 on 2020-11-01, not on 2020-03-08 as 2020a had it.
  - The most recent winter(+08)/summer(+11) transition for Casey Station,
    Antarctica was 2020-10-04 00:01.
  - Remove obsolete files pacificnew, systemv, and yearistype.sh
    from the distribution.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020b-2" date="1602244800">- Need to rebuild, bump the release.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020b-3" date="1602590400">- Include the upstream patch to support pacificnew for java tzupdater.
- Set POSIXRULES macro to continue installing posixrules file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020c-1" date="1603108800">- Rebase to tzdata-2020c
  - Fiji starts DST later than usual, on 2020-12-20.
  - Rearguard now provides an empty file pacificnew to support
    downstream software that expects it.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020d-1" date="1603281600">- Rebase to tzdata-2020d
 - Palestine will end summer time on 2020-10-24 rather than the
   predicted 2020-10-31.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020d-2" date="1603281601">- Update release and rebuild.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020f-1" date="1609243200">- Rebase to tzdata-2020f including changes for tzdata-2020e
  - tzdata-2020f fixes a bug in tzdata-2020e that caused an
    invalid zi file in rearguard format
  - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
  - Australia/Currie is identical to Australia/Hobart for all
    timestamps since 1970 and was therefore created by mistake,
    now moved to the "backward" file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021a-1" date="1611489600">- Rebase to tzdata-2021a
  - South Sudan will change from +03 to +02 on 2021-02-01.</changelog>
</package>
<package pkgid="e776422e7ebec3dd1e05e6dde53738cce487612d0e9d0018370da5a4bd1cdde8" name="tzdata" arch="src">
  <version epoch="0" ver="2021c" rel="1.el7"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020b-2" date="1602244800">- Need to rebuild, bump the release.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020b-3" date="1602590400">- Include the upstream patch to support pacificnew for java tzupdater.
- Set POSIXRULES macro to continue installing posixrules file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020c-1" date="1603108800">- Rebase to tzdata-2020c
  - Fiji starts DST later than usual, on 2020-12-20.
  - Rearguard now provides an empty file pacificnew to support
    downstream software that expects it.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020d-1" date="1603281600">- Rebase to tzdata-2020d
 - Palestine will end summer time on 2020-10-24 rather than the
   predicted 2020-10-31.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020d-2" date="1603281601">- Update release and rebuild.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020f-1" date="1609243200">- Rebase to tzdata-2020f including changes for tzdata-2020e
  - tzdata-2020f fixes a bug in tzdata-2020e that caused an
    invalid zi file in rearguard format
  - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
  - Australia/Currie is identical to Australia/Hobart for all
    timestamps since 1970 and was therefore created by mistake,
    now moved to the "backward" file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021a-1" date="1611489600">- Rebase to tzdata-2021a
  - South Sudan will change from +03 to +02 on 2021-02-01.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021b-1" date="1632571200">- Rebase to tzdata-2021b
  - Innclude patch for Mayen
  - Jordan now starts DST on February's last Thursday.
  - Samoa no longer observes DST.
  - Merge more location-based Zones whose timestamps agree since 1970.
  - Move some backward-compatibility links to 'backward'.
  - Rename Pacific/Enderbury to Pacific/Kanton.
  - Correct many pre-1993 transitions in Malawi, Portugal, etc.
  - zic now creates each output file or link atomically.
  - zic -L no longer omits the POSIX TZ string in its output.
  - zic fixes for truncation and leap second table expiration.
  - zic now follows POSIX for TZ strings using all-year DST.
  - Fix some localtime crashes and bugs in obscure cases.
  - zdump -v now outputs more-useful boundary cases.
  - tzfile.5 better matches a draft successor to RFC 8536.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021b-2" date="1632916800">- Bump the release and rebuild.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021c-1" date="1633348800">- Rebase to tzdata-2021c
  - Revert most of 2021b changes to 'backward'.
  - Fix 'zic -b fat' bug in pre-1970 32-bit data.
  - Fix two Link line typos.
  - Distribute SECURITY file.</changelog>
</package>
<package pkgid="dfee2a59d1d38246c2241318983a1fb0a97ccd076441f2de9536d29582f8eefc" name="tzdata" arch="src">
  <version epoch="0" ver="2021e" rel="1.el7"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020c-1" date="1603108800">- Rebase to tzdata-2020c
  - Fiji starts DST later than usual, on 2020-12-20.
  - Rearguard now provides an empty file pacificnew to support
    downstream software that expects it.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020d-1" date="1603281600">- Rebase to tzdata-2020d
 - Palestine will end summer time on 2020-10-24 rather than the
   predicted 2020-10-31.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020d-2" date="1603281601">- Update release and rebuild.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020f-1" date="1609243200">- Rebase to tzdata-2020f including changes for tzdata-2020e
  - tzdata-2020f fixes a bug in tzdata-2020e that caused an
    invalid zi file in rearguard format
  - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
  - Australia/Currie is identical to Australia/Hobart for all
    timestamps since 1970 and was therefore created by mistake,
    now moved to the "backward" file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021a-1" date="1611489600">- Rebase to tzdata-2021a
  - South Sudan will change from +03 to +02 on 2021-02-01.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021b-1" date="1632571200">- Rebase to tzdata-2021b
  - Innclude patch for Mayen
  - Jordan now starts DST on February's last Thursday.
  - Samoa no longer observes DST.
  - Merge more location-based Zones whose timestamps agree since 1970.
  - Move some backward-compatibility links to 'backward'.
  - Rename Pacific/Enderbury to Pacific/Kanton.
  - Correct many pre-1993 transitions in Malawi, Portugal, etc.
  - zic now creates each output file or link atomically.
  - zic -L no longer omits the POSIX TZ string in its output.
  - zic fixes for truncation and leap second table expiration.
  - zic now follows POSIX for TZ strings using all-year DST.
  - Fix some localtime crashes and bugs in obscure cases.
  - zdump -v now outputs more-useful boundary cases.
  - tzfile.5 better matches a draft successor to RFC 8536.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021b-2" date="1632916800">- Bump the release and rebuild.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021c-1" date="1633348800">- Rebase to tzdata-2021c
  - Revert most of 2021b changes to 'backward'.
  - Fix 'zic -b fat' bug in pre-1970 32-bit data.
  - Fix two Link line typos.
  - Distribute SECURITY file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021d-1" date="1634558400">- Rebase to tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021e-1" date="1634904000">- Rebase to tzdata-2021e - supersedes tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".
  - Palestine will fall back 2021-10-29 at 01:00, rather
    than the predicted 2021-10-30.</changelog>
</package>
<package pkgid="b429631b0b453094eda654d72937d5188c096802fa9833b447549a87376ccf8f" name="tzdata" arch="src">
  <version epoch="0" ver="2022a" rel="1.el7"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020d-1" date="1603281600">- Rebase to tzdata-2020d
 - Palestine will end summer time on 2020-10-24 rather than the
   predicted 2020-10-31.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020d-2" date="1603281601">- Update release and rebuild.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020f-1" date="1609243200">- Rebase to tzdata-2020f including changes for tzdata-2020e
  - tzdata-2020f fixes a bug in tzdata-2020e that caused an
    invalid zi file in rearguard format
  - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
  - Australia/Currie is identical to Australia/Hobart for all
    timestamps since 1970 and was therefore created by mistake,
    now moved to the "backward" file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021a-1" date="1611489600">- Rebase to tzdata-2021a
  - South Sudan will change from +03 to +02 on 2021-02-01.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021b-1" date="1632571200">- Rebase to tzdata-2021b
  - Innclude patch for Mayen
  - Jordan now starts DST on February's last Thursday.
  - Samoa no longer observes DST.
  - Merge more location-based Zones whose timestamps agree since 1970.
  - Move some backward-compatibility links to 'backward'.
  - Rename Pacific/Enderbury to Pacific/Kanton.
  - Correct many pre-1993 transitions in Malawi, Portugal, etc.
  - zic now creates each output file or link atomically.
  - zic -L no longer omits the POSIX TZ string in its output.
  - zic fixes for truncation and leap second table expiration.
  - zic now follows POSIX for TZ strings using all-year DST.
  - Fix some localtime crashes and bugs in obscure cases.
  - zdump -v now outputs more-useful boundary cases.
  - tzfile.5 better matches a draft successor to RFC 8536.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021b-2" date="1632916800">- Bump the release and rebuild.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021c-1" date="1633348800">- Rebase to tzdata-2021c
  - Revert most of 2021b changes to 'backward'.
  - Fix 'zic -b fat' bug in pre-1970 32-bit data.
  - Fix two Link line typos.
  - Distribute SECURITY file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021d-1" date="1634558400">- Rebase to tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021e-1" date="1634904000">- Rebase to tzdata-2021e - supersedes tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".
  - Palestine will fall back 2021-10-29 at 01:00, rather
    than the predicted 2021-10-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-1" date="1647432000">- Rebase to tzdata-2022a
  - Palestine springs forward on 2022-03-27, not -03-26.
  - zdump -v now outputs better failure information
  - fixes for code that reads corrupted TZif data</changelog>
</package>
<package pkgid="12cbd153b7e2f072f57982dce94bb425683465688511a737bd9bf8abdac1998d" name="tzdata" arch="src">
  <version epoch="0" ver="2022c" rel="1.el7"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2020f-1" date="1609243200">- Rebase to tzdata-2020f including changes for tzdata-2020e
  - tzdata-2020f fixes a bug in tzdata-2020e that caused an
    invalid zi file in rearguard format
  - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
  - Australia/Currie is identical to Australia/Hobart for all
    timestamps since 1970 and was therefore created by mistake,
    now moved to the "backward" file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021a-1" date="1611489600">- Rebase to tzdata-2021a
  - South Sudan will change from +03 to +02 on 2021-02-01.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021b-1" date="1632571200">- Rebase to tzdata-2021b
  - Innclude patch for Mayen
  - Jordan now starts DST on February's last Thursday.
  - Samoa no longer observes DST.
  - Merge more location-based Zones whose timestamps agree since 1970.
  - Move some backward-compatibility links to 'backward'.
  - Rename Pacific/Enderbury to Pacific/Kanton.
  - Correct many pre-1993 transitions in Malawi, Portugal, etc.
  - zic now creates each output file or link atomically.
  - zic -L no longer omits the POSIX TZ string in its output.
  - zic fixes for truncation and leap second table expiration.
  - zic now follows POSIX for TZ strings using all-year DST.
  - Fix some localtime crashes and bugs in obscure cases.
  - zdump -v now outputs more-useful boundary cases.
  - tzfile.5 better matches a draft successor to RFC 8536.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021b-2" date="1632916800">- Bump the release and rebuild.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021c-1" date="1633348800">- Rebase to tzdata-2021c
  - Revert most of 2021b changes to 'backward'.
  - Fix 'zic -b fat' bug in pre-1970 32-bit data.
  - Fix two Link line typos.
  - Distribute SECURITY file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021d-1" date="1634558400">- Rebase to tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021e-1" date="1634904000">- Rebase to tzdata-2021e - supersedes tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".
  - Palestine will fall back 2021-10-29 at 01:00, rather
    than the predicted 2021-10-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-1" date="1647432000">- Rebase to tzdata-2022a
  - Palestine springs forward on 2022-03-27, not -03-26.
  - zdump -v now outputs better failure information
  - fixes for code that reads corrupted TZif data</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022b-1" date="1660132800">- Rebase to tzdata-2022b
  - Chile transitions to DST on 2022-09-11, not 2022-09-04
  - 'make install' now defaults LOCALTIME to Factory rather than GMT
  - More zones that are the same since 1970 have been moved to backzone.
  - Include patch for awk workaround.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022c-1" date="1660651200">- Rebase to tzdata-2022c - supersedes tzdata-2022b
  - Add a work-around for an awk bug in FreeBSD, macOS, etc.
  - Improve tzselect with respect to intercontinental Zones.</changelog>
</package>
<package pkgid="54ba1ca130ed9d93b411109645e09cdafc89c683adfd9761a85551251bba94c8" name="tzdata" arch="src">
  <version epoch="0" ver="2022d" rel="1.el7"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021a-1" date="1611489600">- Rebase to tzdata-2021a
  - South Sudan will change from +03 to +02 on 2021-02-01.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021b-1" date="1632571200">- Rebase to tzdata-2021b
  - Innclude patch for Mayen
  - Jordan now starts DST on February's last Thursday.
  - Samoa no longer observes DST.
  - Merge more location-based Zones whose timestamps agree since 1970.
  - Move some backward-compatibility links to 'backward'.
  - Rename Pacific/Enderbury to Pacific/Kanton.
  - Correct many pre-1993 transitions in Malawi, Portugal, etc.
  - zic now creates each output file or link atomically.
  - zic -L no longer omits the POSIX TZ string in its output.
  - zic fixes for truncation and leap second table expiration.
  - zic now follows POSIX for TZ strings using all-year DST.
  - Fix some localtime crashes and bugs in obscure cases.
  - zdump -v now outputs more-useful boundary cases.
  - tzfile.5 better matches a draft successor to RFC 8536.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021b-2" date="1632916800">- Bump the release and rebuild.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021c-1" date="1633348800">- Rebase to tzdata-2021c
  - Revert most of 2021b changes to 'backward'.
  - Fix 'zic -b fat' bug in pre-1970 32-bit data.
  - Fix two Link line typos.
  - Distribute SECURITY file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021d-1" date="1634558400">- Rebase to tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021e-1" date="1634904000">- Rebase to tzdata-2021e - supersedes tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".
  - Palestine will fall back 2021-10-29 at 01:00, rather
    than the predicted 2021-10-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-1" date="1647432000">- Rebase to tzdata-2022a
  - Palestine springs forward on 2022-03-27, not -03-26.
  - zdump -v now outputs better failure information
  - fixes for code that reads corrupted TZif data</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022b-1" date="1660132800">- Rebase to tzdata-2022b
  - Chile transitions to DST on 2022-09-11, not 2022-09-04
  - 'make install' now defaults LOCALTIME to Factory rather than GMT
  - More zones that are the same since 1970 have been moved to backzone.
  - Include patch for awk workaround.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022c-1" date="1660651200">- Rebase to tzdata-2022c - supersedes tzdata-2022b
  - Add a work-around for an awk bug in FreeBSD, macOS, etc.
  - Improve tzselect with respect to intercontinental Zones.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022d-1" date="1664193600">- Rebase to tzdata-2022d
  - Palestine's DST transition will be on October 29, 2022,
    not October 28, 2022.
  - Europe/Uzhgorod and Europe/Zaporozhye are moved to 'backzone'.</changelog>
</package>
<package pkgid="bf3a84b5fa1cb5eb2fa76881bd2c217406a93e85dbddb03c32b3ad9d2fb2fb1b" name="tzdata" arch="src">
  <version epoch="0" ver="2022e" rel="1.el7"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021b-1" date="1632571200">- Rebase to tzdata-2021b
  - Innclude patch for Mayen
  - Jordan now starts DST on February's last Thursday.
  - Samoa no longer observes DST.
  - Merge more location-based Zones whose timestamps agree since 1970.
  - Move some backward-compatibility links to 'backward'.
  - Rename Pacific/Enderbury to Pacific/Kanton.
  - Correct many pre-1993 transitions in Malawi, Portugal, etc.
  - zic now creates each output file or link atomically.
  - zic -L no longer omits the POSIX TZ string in its output.
  - zic fixes for truncation and leap second table expiration.
  - zic now follows POSIX for TZ strings using all-year DST.
  - Fix some localtime crashes and bugs in obscure cases.
  - zdump -v now outputs more-useful boundary cases.
  - tzfile.5 better matches a draft successor to RFC 8536.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021b-2" date="1632916800">- Bump the release and rebuild.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021c-1" date="1633348800">- Rebase to tzdata-2021c
  - Revert most of 2021b changes to 'backward'.
  - Fix 'zic -b fat' bug in pre-1970 32-bit data.
  - Fix two Link line typos.
  - Distribute SECURITY file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021d-1" date="1634558400">- Rebase to tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021e-1" date="1634904000">- Rebase to tzdata-2021e - supersedes tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".
  - Palestine will fall back 2021-10-29 at 01:00, rather
    than the predicted 2021-10-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-1" date="1647432000">- Rebase to tzdata-2022a
  - Palestine springs forward on 2022-03-27, not -03-26.
  - zdump -v now outputs better failure information
  - fixes for code that reads corrupted TZif data</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022b-1" date="1660132800">- Rebase to tzdata-2022b
  - Chile transitions to DST on 2022-09-11, not 2022-09-04
  - 'make install' now defaults LOCALTIME to Factory rather than GMT
  - More zones that are the same since 1970 have been moved to backzone.
  - Include patch for awk workaround.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022c-1" date="1660651200">- Rebase to tzdata-2022c - supersedes tzdata-2022b
  - Add a work-around for an awk bug in FreeBSD, macOS, etc.
  - Improve tzselect with respect to intercontinental Zones.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022d-1" date="1664193600">- Rebase to tzdata-2022d
  - Palestine's DST transition will be on October 29, 2022,
    not October 28, 2022.
  - Europe/Uzhgorod and Europe/Zaporozhye are moved to 'backzone'.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022e-1" date="1665576000">- Rebase to tzdata-2022e
  - Jordan and Syria cancelled the DST transition planned
    for 2022-10-28, remaining at +03 permanently.</changelog>
</package>
<package pkgid="a4be0433276525b76c0044db3dc6f46c30fc6351759e6b753fb7bf09ed76b177" name="tzdata" arch="src">
  <version epoch="0" ver="2022f" rel="1.el7"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021b-2" date="1632916800">- Bump the release and rebuild.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021c-1" date="1633348800">- Rebase to tzdata-2021c
  - Revert most of 2021b changes to 'backward'.
  - Fix 'zic -b fat' bug in pre-1970 32-bit data.
  - Fix two Link line typos.
  - Distribute SECURITY file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021d-1" date="1634558400">- Rebase to tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021e-1" date="1634904000">- Rebase to tzdata-2021e - supersedes tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".
  - Palestine will fall back 2021-10-29 at 01:00, rather
    than the predicted 2021-10-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-1" date="1647432000">- Rebase to tzdata-2022a
  - Palestine springs forward on 2022-03-27, not -03-26.
  - zdump -v now outputs better failure information
  - fixes for code that reads corrupted TZif data</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022b-1" date="1660132800">- Rebase to tzdata-2022b
  - Chile transitions to DST on 2022-09-11, not 2022-09-04
  - 'make install' now defaults LOCALTIME to Factory rather than GMT
  - More zones that are the same since 1970 have been moved to backzone.
  - Include patch for awk workaround.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022c-1" date="1660651200">- Rebase to tzdata-2022c - supersedes tzdata-2022b
  - Add a work-around for an awk bug in FreeBSD, macOS, etc.
  - Improve tzselect with respect to intercontinental Zones.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022d-1" date="1664193600">- Rebase to tzdata-2022d
  - Palestine's DST transition will be on October 29, 2022,
    not October 28, 2022.
  - Europe/Uzhgorod and Europe/Zaporozhye are moved to 'backzone'.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022e-1" date="1665576000">- Rebase to tzdata-2022e
  - Jordan and Syria cancelled the DST transition planned
    for 2022-10-28, remaining at +03 permanently.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022f-1" date="1667217600">- Rebase to tzdata-2022f
  - Mexico will stop observing DST except near the US border.
  - Chihuahua moved to -06 year round starting on 2022-10-30.
  - Fiji no longer observes DST.</changelog>
</package>
<package pkgid="83d9771420e33b9f3ed3faeb5a136bdfd8baeeec51199bd2f5cfef3ec97f60b4" name="tzdata" arch="src">
  <version epoch="0" ver="2022g" rel="1.el7"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021c-1" date="1633348800">- Rebase to tzdata-2021c
  - Revert most of 2021b changes to 'backward'.
  - Fix 'zic -b fat' bug in pre-1970 32-bit data.
  - Fix two Link line typos.
  - Distribute SECURITY file.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021d-1" date="1634558400">- Rebase to tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021e-1" date="1634904000">- Rebase to tzdata-2021e - supersedes tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".
  - Palestine will fall back 2021-10-29 at 01:00, rather
    than the predicted 2021-10-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-1" date="1647432000">- Rebase to tzdata-2022a
  - Palestine springs forward on 2022-03-27, not -03-26.
  - zdump -v now outputs better failure information
  - fixes for code that reads corrupted TZif data</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022b-1" date="1660132800">- Rebase to tzdata-2022b
  - Chile transitions to DST on 2022-09-11, not 2022-09-04
  - 'make install' now defaults LOCALTIME to Factory rather than GMT
  - More zones that are the same since 1970 have been moved to backzone.
  - Include patch for awk workaround.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022c-1" date="1660651200">- Rebase to tzdata-2022c - supersedes tzdata-2022b
  - Add a work-around for an awk bug in FreeBSD, macOS, etc.
  - Improve tzselect with respect to intercontinental Zones.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022d-1" date="1664193600">- Rebase to tzdata-2022d
  - Palestine's DST transition will be on October 29, 2022,
    not October 28, 2022.
  - Europe/Uzhgorod and Europe/Zaporozhye are moved to 'backzone'.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022e-1" date="1665576000">- Rebase to tzdata-2022e
  - Jordan and Syria cancelled the DST transition planned
    for 2022-10-28, remaining at +03 permanently.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022f-1" date="1667217600">- Rebase to tzdata-2022f
  - Mexico will stop observing DST except near the US border.
  - Chihuahua moved to -06 year round starting on 2022-10-30.
  - Fiji no longer observes DST.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022g-1" date="1669723200">- Rebase to tzdata-2022g
  - The northern edge of the Mexican state of Chihuahua will
    change time zone to agree with nearby US locations on
    2022-11-30.
  - Added a new Zone America/Ciudad_Juarez that splits from
    America/Ojinaga.</changelog>
</package>
<package pkgid="0e4fe942d21a92c4601deb0e1d6b2e8cf4bd13e6b6ea6c05d93b6ca172df2562" name="tzdata" arch="src">
  <version epoch="0" ver="2023b" rel="1.el7"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2021e-1" date="1634904000">- Rebase to tzdata-2021e - supersedes tzdata-2021d
  - Pacific/Fiji suspended DST for the 2021/2022 season.
  - 'zic -r' now marks unspecified timestamps with "-00".
  - Palestine will fall back 2021-10-29 at 01:00, rather
    than the predicted 2021-10-30.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-1" date="1647432000">- Rebase to tzdata-2022a
  - Palestine springs forward on 2022-03-27, not -03-26.
  - zdump -v now outputs better failure information
  - fixes for code that reads corrupted TZif data</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022b-1" date="1660132800">- Rebase to tzdata-2022b
  - Chile transitions to DST on 2022-09-11, not 2022-09-04
  - 'make install' now defaults LOCALTIME to Factory rather than GMT
  - More zones that are the same since 1970 have been moved to backzone.
  - Include patch for awk workaround.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022c-1" date="1660651200">- Rebase to tzdata-2022c - supersedes tzdata-2022b
  - Add a work-around for an awk bug in FreeBSD, macOS, etc.
  - Improve tzselect with respect to intercontinental Zones.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022d-1" date="1664193600">- Rebase to tzdata-2022d
  - Palestine's DST transition will be on October 29, 2022,
    not October 28, 2022.
  - Europe/Uzhgorod and Europe/Zaporozhye are moved to 'backzone'.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022e-1" date="1665576000">- Rebase to tzdata-2022e
  - Jordan and Syria cancelled the DST transition planned
    for 2022-10-28, remaining at +03 permanently.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022f-1" date="1667217600">- Rebase to tzdata-2022f
  - Mexico will stop observing DST except near the US border.
  - Chihuahua moved to -06 year round starting on 2022-10-30.
  - Fiji no longer observes DST.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022g-1" date="1669723200">- Rebase to tzdata-2022g
  - The northern edge of the Mexican state of Chihuahua will
    change time zone to agree with nearby US locations on
    2022-11-30.
  - Added a new Zone America/Ciudad_Juarez that splits from
    America/Ojinaga.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023a-1" date="1679486400">- Rebase to tzdata-2023a
  - Egypt reintroduced DST, from April through October.
  - Morocco springs forward April 23, not April 30.
  - Palestine delayed the start of DST this year.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023b-1" date="1679659200">- Rebase to tzdata-2023b
  - Lebanon will transition to DST on April 20/21, not March 25/26.</changelog>
</package>
<package pkgid="b6edcad9219eed55c899d4e41d94911b3ae9c3496d18f4da7d2b957f8b856c0e" name="tzdata" arch="src">
  <version epoch="0" ver="2023c" rel="1.el7"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022a-1" date="1647432000">- Rebase to tzdata-2022a
  - Palestine springs forward on 2022-03-27, not -03-26.
  - zdump -v now outputs better failure information
  - fixes for code that reads corrupted TZif data</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022b-1" date="1660132800">- Rebase to tzdata-2022b
  - Chile transitions to DST on 2022-09-11, not 2022-09-04
  - 'make install' now defaults LOCALTIME to Factory rather than GMT
  - More zones that are the same since 1970 have been moved to backzone.
  - Include patch for awk workaround.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022c-1" date="1660651200">- Rebase to tzdata-2022c - supersedes tzdata-2022b
  - Add a work-around for an awk bug in FreeBSD, macOS, etc.
  - Improve tzselect with respect to intercontinental Zones.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022d-1" date="1664193600">- Rebase to tzdata-2022d
  - Palestine's DST transition will be on October 29, 2022,
    not October 28, 2022.
  - Europe/Uzhgorod and Europe/Zaporozhye are moved to 'backzone'.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022e-1" date="1665576000">- Rebase to tzdata-2022e
  - Jordan and Syria cancelled the DST transition planned
    for 2022-10-28, remaining at +03 permanently.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022f-1" date="1667217600">- Rebase to tzdata-2022f
  - Mexico will stop observing DST except near the US border.
  - Chihuahua moved to -06 year round starting on 2022-10-30.
  - Fiji no longer observes DST.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022g-1" date="1669723200">- Rebase to tzdata-2022g
  - The northern edge of the Mexican state of Chihuahua will
    change time zone to agree with nearby US locations on
    2022-11-30.
  - Added a new Zone America/Ciudad_Juarez that splits from
    America/Ojinaga.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023a-1" date="1679486400">- Rebase to tzdata-2023a
  - Egypt reintroduced DST, from April through October.
  - Morocco springs forward April 23, not April 30.
  - Palestine delayed the start of DST this year.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023b-1" date="1679659200">- Rebase to tzdata-2023b
  - Lebanon will transition to DST on April 20/21, not March 25/26.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023c-1" date="1680004800">- Rebase to tzdata-2023c
  - Lebanon reversed the change added in tzdata-2023b.</changelog>
</package>
<package pkgid="1359ca780a1f37729c04c65d76cf55ead101cead9319be2e96b9a5f3ef7054dd" name="tzdata" arch="src">
  <version epoch="0" ver="2024a" rel="1.el7"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022d-1" date="1664193600">- Rebase to tzdata-2022d
  - Palestine's DST transition will be on October 29, 2022,
    not October 28, 2022.
  - Europe/Uzhgorod and Europe/Zaporozhye are moved to 'backzone'.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022e-1" date="1665576000">- Rebase to tzdata-2022e
  - Jordan and Syria cancelled the DST transition planned
    for 2022-10-28, remaining at +03 permanently.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022f-1" date="1667217600">- Rebase to tzdata-2022f
  - Mexico will stop observing DST except near the US border.
  - Chihuahua moved to -06 year round starting on 2022-10-30.
  - Fiji no longer observes DST.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2022g-1" date="1669723200">- Rebase to tzdata-2022g
  - The northern edge of the Mexican state of Chihuahua will
    change time zone to agree with nearby US locations on
    2022-11-30.
  - Added a new Zone America/Ciudad_Juarez that splits from
    America/Ojinaga.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023a-1" date="1679486400">- Rebase to tzdata-2023a
  - Egypt reintroduced DST, from April through October.
  - Morocco springs forward April 23, not April 30.
  - Palestine delayed the start of DST this year.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023b-1" date="1679659200">- Rebase to tzdata-2023b
  - Lebanon will transition to DST on April 20/21, not March 25/26.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023c-1" date="1680004800">- Rebase to tzdata-2023c
  - Lebanon reversed the change added in tzdata-2023b.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023c-2" date="1692705600">- Bump release to test recent process changes. (RHEL-1328)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2023d-1" date="1704110400">- Rebase to tzdata-2023d
  - Include time zone changes for Ittoqqortoormiit, Greenland
    and Vostok, Antarctica.
  - Update the expiration date for the leap-seconds.list file.
    No new leap seconds were added.</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2024a-1" date="1706788800">- Rebase to tzdata-2024a
  - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
  - Palestine will spring forward a week later than previously
    predicted.</changelog>
</package>
<package pkgid="22b907973923c47c4a35424be46bb0df550126bcaf77bcab8d86fcac38fae2ee" name="unzip" arch="src">
  <version epoch="0" ver="6.0" rel="22.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 6.0-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 6.0-14" date="1406030400">- Fix caseinsensitive bug
  Resolves: #1104018</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 6.0-15" date="1424865600">- Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
  Resolves: #1196134 #1196122 #1196126 #1196130</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 6.0-16" date="1448452800">- Added patch for build option "-Werror=format-security"
- Added support of non-unicode non-latin charset
- Fix print of non-ascii filenames
- Fix troubles with symlinks for archives with many files
  Resolves: rhbz#1276746, rhbz#1286165, rhbz#1276744</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 6.0-17" date="1515067200">- Fix error with wrong CRC checks by adding -DNOMEMCPY flag
  Resolves: #1525636</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 6.0-18" date="1515499200">- Add -DNOLCHMOD build option, since lchmod is not availabel on Linux
  Anyway
  Related: #1531116</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 6.0-19" date="1515499201">- rename patch unzip-6.0-nostrip.patch to unzip-6.0-configure.patch
- make linking flags configurable from the specc file
- set linking flags to use relro hardening
  Related: #1531116</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 6.0-20" date="1551096000">- Fix CVE-2018-18384
  Resolves: CVE-2018-18384</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 6.0-21" date="1572868800">- Fix CVE-2019-13232
- Resolves: CVE-2019-13232</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 6.0-22" date="1616673600">- Fix a false positive in a zip bomb detection
- Resolves: 1920632</changelog>
</package>
<package pkgid="1e2e7a69bcb1651e11f599a2be809a83bcafc9d4d00ca5eaee01ec61f5414ab2" name="unzip" arch="src">
  <version epoch="0" ver="6.0" rel="24.el7_9"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 6.0-15" date="1424865600">- Fix CVE-2014-9636 CVE-2014-8139 CVE-2014-8140 CVE-2014-8141
  Resolves: #1196134 #1196122 #1196126 #1196130</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 6.0-16" date="1448452800">- Added patch for build option "-Werror=format-security"
- Added support of non-unicode non-latin charset
- Fix print of non-ascii filenames
- Fix troubles with symlinks for archives with many files
  Resolves: rhbz#1276746, rhbz#1286165, rhbz#1276744</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 6.0-17" date="1515067200">- Fix error with wrong CRC checks by adding -DNOMEMCPY flag
  Resolves: #1525636</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 6.0-18" date="1515499200">- Add -DNOLCHMOD build option, since lchmod is not availabel on Linux
  Anyway
  Related: #1531116</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 6.0-19" date="1515499201">- rename patch unzip-6.0-nostrip.patch to unzip-6.0-configure.patch
- make linking flags configurable from the specc file
- set linking flags to use relro hardening
  Related: #1531116</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 6.0-20" date="1551096000">- Fix CVE-2018-18384
  Resolves: CVE-2018-18384</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 6.0-21" date="1572868800">- Fix CVE-2019-13232
- Resolves: CVE-2019-13232</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 6.0-22" date="1616673600">- Fix a false positive in a zip bomb detection
- Resolves: 1920632</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 6.0-23" date="1636632000">- Disable the zipbomb detection patches
- There were too many false positives for now, will reenable this later with an option to opt-out
- Resolves: rhbz#2020318</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 6.0-24" date="1638878400">- Reenable the zipbomb detection patches
- Add environment variable that disables the zipbomb detection
- Resolves: rhbz#2020318</changelog>
</package>
<package pkgid="11c3b5c3789cb402b1fa2c18f53e25677eb2a7760564940d9e66c6c2be6ecdb2" name="util-linux" arch="src">
  <version epoch="0" ver="2.23.2" rel="65.el7_9.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-57" date="1528977600">- add another ppc aliases to setarch (#1562125)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-58" date="1530705600">- fix #1594681 - [RHEL7.2] blkid does not output swap area</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-59" date="1534766400">- fix #1618711 - exec option in mount unable to override the implicit noexec in user option
- fix #1616264 - Login to emergency shell failed</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-60" date="1548936000">- fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-61" date="1553256000">- #1203378 - Cannot use swapon with fallocated XFS swapfile
- #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
- #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
- #1639465 - Bad formatting in agetty.8 man page
- #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
- #1678451 - Unable to mount to a directory that matches a dm device under /dev</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-62" date="1565092800">- fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
- fix #1712768 - lsmem segfaults on ppc64 wih -o
- fix #1690102 - setarch(8) does not check error return values properly.
- fix #1734261 - lscpu not showing Physical socket, chips information</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-63" date="1566388800">- fix #1740572 - libmount ignores empty domain field due to which plain domain option is sent.</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-64" date="1586260800">- fix #1788896 - Internal testsuite: libmount tests failed
- fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
- fix #1816183 - "mount -a" should ignore already mounted bind mounts.
- fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
- fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65" date="1587988800">- fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
- fix #1745657 - mismatch between spec file and uuidd runtime directory</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-65.el7_9.1" date="1607515200">- fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
- fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
- fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]</changelog>
</package>
<package pkgid="d9eb0e2061c18ba3445b928cc5c432199fdba8d0a1c86713805e6fad70d21d94" name="vim" arch="src">
  <version epoch="2" ver="7.4.629" rel="8.el7_9"/>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-2" date="1484913600">- 1383902 - CPU spikes to 100% and timeouts observed in strace when opening yaml extensions using vim</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-3" date="1503489600">- 1267826 - Include c++11 syntax highlighting in vim
- 1319760 - [RFE] Vim should support blowfish2, plus ensure that RHEL6 encrypted files can be opened in RHEL7</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-4" date="1504612800">- fixed upstream tests, which failed after last build</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.160-5" date="1529323200">- 1490927 - vim dumps core when system reboots</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.629-1" date="1547640000">- 1563419 - Vim in RHEL 7 is older than VIM in RHEL 6 (Rebase)
- 1377316 - [RFE] make _remote_ vim doing the right decisions about 'set background'</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.629-2" date="1548072000">- adding several additional changes for #1377316 from upstream</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.629-3" date="1560513600">- 1719964 - CVE-2019-12735 arbitrary command execution in getchar.c [rhel-7.7]</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.629-6" date="1560513601">- increment release enough to get CVE fix 1719964 for clients migrated from RHEL6</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.629-7" date="1579608000">- 1743070 - manpage of vim is garbled in Japanese locale</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 2:7.4.629-8" date="1601467200">- 1833186 - gvim consums 100% cpu under certain condition</changelog>
</package>
<package pkgid="658d32557d3f3cad7dcefdd72d1f78880a2de55d8a4e8c97f3bb8aed9e71c8fb" name="virt-what" arch="src">
  <version epoch="0" ver="1.18" rel="4.el7_9.1"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.13-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.13-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.13-6" date="1429617600">- Fix detection of aarch64
  resolves: rhbz#1201845
  Add all commits to version 1.15.</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.13-7" date="1466424000">- Add support for detecting POWER KVM and LPAR
  resolves: rhbz#1147876
- Detect RHEV/oVirt
  resolves: rhbz#1249438
- Detect ACPI boot aarch64 guest
  resolves: rhbz#1275349
- Fix typo in manual page
  resolves: rhbz#1099289</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.13-8" date="1469620800">- Depend on dmidecode on aarch64
  resolves: rhbz#1360699</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.13-9" date="1487246400">- Detect RHEV/oVirt (second fix)
  resolves: rhbz#1249438</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.13-10" date="1490702400">- Require 'which' program
  resolves: rhbz#1433005</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.18-2" date="1508241600">- Rebase to Fedora Rawhide / upstream version.
- Include upstream patches since 1.18 was released.
  resolves: rhbz#1476878</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.18-4" date="1508241601">- Add patch to recognize ppc64le virtualization.
  resolves: rhbz#1147876</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.18-4.1" date="1626782400">- Add Nutanix AHV support
  resolves: rhbz#xxx</changelog>
</package>
<package pkgid="417a397bbf494c05a9c5529809c847b151a7da5db9ad34defb303ccce4d07da5" name="virt-who" arch="src">
  <version epoch="0" ver="0.22.5" rel="1.el7"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.22.2-1" date="1527768000">- Correct date ordering in changelog (wpoteat@redhat.com)
- 1575513: Re-add changelog entries that were merged out. (wpoteat@redhat.com)
- 1560598: Pass hostname to M2Crypto in STOMP client (khowell@redhat.com)
- Make vdsm respect RHSM_USE_M2CRYPTO var (khowell@redhat.com)
- Set up Travis CI to use Python 3 (jhnidek@redhat.com)
- Fixing python 2 -&gt; 3 issue (wpoteat@redhat.com)
- kubevirt support (piotr.kliczewski@gmail.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt;" date="1528718400">- Add releaser for RHEL 7.6 (wpoteat@redhat.com)
- Remove f26 releaser (f26 is EOL) (csnyder@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.22.2-2" date="1528718401">- Add releaser for RHEL 7.6 (wpoteat@redhat.com)
- Remove f26 releaser (f26 is EOL) (csnyder@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt;" date="1528977600">- Correction to the spec file condition for python 3 (wpoteat@redhat.com)
- Update to release tagger (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.22.2-3" date="1528977601">- Correction to the spec file condition for python 3 (wpoteat@redhat.com)
- Update to release tagger (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.22.2-4" date="1529668800">- 1432140: Log when a duplicate hypervisor id is detected [ENT-568]
  (wpoteat@redhat.com)
- 1368341: Warn that --sam/--satellite6 are unused &amp; deprecated * Now logging a
  warning when --sam/--satellite6 are used. * man page and --help output
  updated to explaing that these options are unused and virt-who will report to
  either sam/satellite/stage candlepin regardless of their being there.
  (nmoumoul@redhat.com)
- 1455062: Partial fix of high CPU usage, when many conf files used
  (jhnidek@redhat.com)
- Correction to the spec file condition for python 3 (wpoteat@redhat.com)
- ENT-554 Host reports for libvirt and rhevm include the system hardware uuid
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.22.2-5" date="1529668801">-</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.22.3-1" date="1531224000">- Update for build process (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.22.4-1" date="1535371200">- 1596041: Make python libvirt required (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.22.5-1" date="1536753600">- 1387800: set name of ESX cluster properly; ENT-793 (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="bfec24151c79225f9a9aa38eb8a7fc26507065bc757b664f46dde3c5130718dd" name="virt-who" arch="src">
  <version epoch="0" ver="0.24.7" rel="1.el7"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.22.2-1.2" date="1531569600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt;" date="1537358400">- Automatic commit of package [virt-who] release [0.22.2-1].
  (wpoteat@redhat.com)
- kubevirt: warn user that dependencies are missing
  (piotr.kliczewski@gmail.com)
- 1369634: Dont log proxy html errors for hyperv: - When hyperv gets an HTML
  page as error response from a proxy, don't log the whole html, but try to
  scrape the title off of it. - If scraping the title doesn't work, only log
  the http error code. - Changed all variables named 'xml' to 'xml_doc' in
  hyperv.py to avoid conflict with the new python keyword.
  (nmoumoul@redhat.com)
- 1599725: Handle job status report errors (nmoumoul@redhat.com)
- 1557296: Warn of commented out lines prefixed with space/tab (ENT-606) - When
  reading config files in python2, warn the user if a line continuation (starts
  with space/tab) is followed by '#' (nmoumoul@redhat.com)
- kubevirt: Ignore vmis in Scheduling (piotr.kliczewski@gmail.com)
- kubevirt: Update config (piotr.kliczewski@gmail.com)
- Print/log debug information about filtered hosts (jhnidek@redhat.com)
- 1577954: Added config option filter_type; ENT-580 (jhnidek@redhat.com)
- Changed info about how filter_host_parents/exclude_host_parents filters work
  (ktordeur@redhat.com)
- 1387800: set name of ESX cluster properly; ENT-793 (jhnidek@redhat.com)
- Add release entry for RHEL 8 (wpoteat@redhat.com)
- template update (wpinheir@iroman.home)
- template update (wpinheir@iroman.home)
- 1596041: Make python libvirt required (wpoteat@redhat.com)
- updating RHV/RHEV/XenServer information (wpinheir@iroman.home)
- 1581021: Decode error from unicode passwords (wpoteat@redhat.com)
- 1510920: Change the choreography for the job status check
  (wpoteat@redhat.com)
- ENT-493: Add option to command line to return version
  (adarshvritant@gmail.com)
- Update executor.py (all_bright@live.com)
- kubevirt: rename virtual machine instance (piotr.kliczewski@gmail.com)
- Update for build process (wpoteat@redhat.com)
- Fixed hyperv wmi query. Invalid response (500)
  (njmiller@lakemichigancollege.edu)
- 1432140: Log when a duplicate hypervisor id is detected [ENT-568]
  (wpoteat@redhat.com)
- 1368341: Warn that --sam/--satellite6 are unused &amp; deprecated * Now logging a
  warning when --sam/--satellite6 are used. * man page and --help output
  updated to explaing that these options are unused and virt-who will report to
  either sam/satellite/stage candlepin regardless of their being there.
  (nmoumoul@redhat.com)
- 1455062: Partial fix of high CPU usage, when many conf files used
  (jhnidek@redhat.com)
- Correction to the spec file condition for python 3 (wpoteat@redhat.com)
- ENT-554 Host reports for libvirt and rhevm include the system hardware uuid
  (wpoteat@redhat.com)
- Add releaser for RHEL 7.6 (wpoteat@redhat.com)
- Remove f26 releaser (f26 is EOL) (csnyder@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.24.0-1" date="1537358401">- Automatic commit of package [virt-who] release [0.22.2-1].
  (wpoteat@redhat.com)
- kubevirt: warn user that dependencies are missing
  (piotr.kliczewski@gmail.com)
- 1369634: Dont log proxy html errors for hyperv: - When hyperv gets an HTML
  page as error response from a proxy, don't log the whole html, but try to
  scrape the title off of it. - If scraping the title doesn't work, only log
  the http error code. - Changed all variables named 'xml' to 'xml_doc' in
  hyperv.py to avoid conflict with the new python keyword.
  (nmoumoul@redhat.com)
- 1599725: Handle job status report errors (nmoumoul@redhat.com)
- 1557296: Warn of commented out lines prefixed with space/tab (ENT-606) - When
  reading config files in python2, warn the user if a line continuation (starts
  with space/tab) is followed by '#' (nmoumoul@redhat.com)
- kubevirt: Ignore vmis in Scheduling (piotr.kliczewski@gmail.com)
- kubevirt: Update config (piotr.kliczewski@gmail.com)
- Print/log debug information about filtered hosts (jhnidek@redhat.com)
- 1577954: Added config option filter_type; ENT-580 (jhnidek@redhat.com)
- Changed info about how filter_host_parents/exclude_host_parents filters work
  (ktordeur@redhat.com)
- 1387800: set name of ESX cluster properly; ENT-793 (jhnidek@redhat.com)
- Add release entry for RHEL 8 (wpoteat@redhat.com)
- template update (wpinheir@iroman.home)
- template update (wpinheir@iroman.home)
- 1596041: Make python libvirt required (wpoteat@redhat.com)
- updating RHV/RHEV/XenServer information (wpinheir@iroman.home)
- 1581021: Decode error from unicode passwords (wpoteat@redhat.com)
- 1510920: Change the choreography for the job status check
  (wpoteat@redhat.com)
- ENT-493: Add option to command line to return version
  (adarshvritant@gmail.com)
- Update executor.py (all_bright@live.com)
- kubevirt: rename virtual machine instance (piotr.kliczewski@gmail.com)
- Update for build process (wpoteat@redhat.com)
- Fixed hyperv wmi query. Invalid response (500)
  (njmiller@lakemichigancollege.edu)
- 1432140: Log when a duplicate hypervisor id is detected [ENT-568]
  (wpoteat@redhat.com)
- 1368341: Warn that --sam/--satellite6 are unused &amp; deprecated * Now logging a
  warning when --sam/--satellite6 are used. * man page and --help output
  updated to explaing that these options are unused and virt-who will report to
  either sam/satellite/stage candlepin regardless of their being there.
  (nmoumoul@redhat.com)
- 1455062: Partial fix of high CPU usage, when many conf files used
  (jhnidek@redhat.com)
- Correction to the spec file condition for python 3 (wpoteat@redhat.com)
- ENT-554 Host reports for libvirt and rhevm include the system hardware uuid
  (wpoteat@redhat.com)
- Add releaser for RHEL 7.6 (wpoteat@redhat.com)
- Remove f26 releaser (f26 is EOL) (csnyder@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.24.1-1" date="1540814400">- Merge in changes from Fedora packaging (wpoteat@redhat.com)
- ENT-826 Added correlation id to virt-who reports (nmoumoul@redhat.com)
- Releaser addition for rhel-7.7 (wpoteat@redhat.com)
- Install subscription-manager, not python-rhsm which is deprecated: - Removed
  python-rhsm from the requirements, and added subscription-manager as
  dependency. - Added some dependencies that travis requires to install
  subscription-manager. (nmoumoul@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.24.2-1" date="1545393600">- 1657104: Remove references to removed command line options
  (wpoteat@redhat.com)
- Fixing kubevirt config path argument (piotr.kliczewski@gmail.com)
- fix travis run (wpoteat@redhat.com)
- 1650133: setuptools naming change (wpoteat@redhat.com)
- 1638250: Proxy issue when https not specified (wpoteat@redhat.com)
- Update branch definition for RHEL 8.0 branch (wpoteat@redhat.com)
- ENT-896: Disable deprecated configuration options in python 3
  (wpoteat@redhat.com)
- 1637407: vCenter mapping info failure due to TypeError (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt;" date="1554292800">- 1667522: Omit ESX host from report when no hostname is present
  (wpoteat@redhat.com)
- 1693858: Send hardware uuid on every check in for system reconcilliation
  (wpoteat@redhat.com)
- kubevirt: provide user authentication (piotr.kliczewski@gmail.com)
- 1486270: pass no_proxy from config files (wpoteat@redhat.com)
- kubevirt: drop kubernetes and kubevirt dependencies
  (piotr.kliczewski@gmail.com)
- 1638250: Improved fix for http proxy issue (wpoteat@redhat.com)
- Update releaser (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.24.4-1" date="1554292801">- 1667522: Omit ESX host from report when no hostname is present
  (wpoteat@redhat.com)
- 1693858: Send hardware uuid on every check in for system reconcilliation
  (wpoteat@redhat.com)
- kubevirt: provide user authentication (piotr.kliczewski@gmail.com)
- 1486270: pass no_proxy from config files (wpoteat@redhat.com)
- kubevirt: drop kubernetes and kubevirt dependencies
  (piotr.kliczewski@gmail.com)
- 1638250: Improved fix for http proxy issue (wpoteat@redhat.com)
- Update releaser (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.24.5-1" date="1555502400">- 1695538: Provide support for hypervisor_id option
  (piotr.kliczewski@gmail.com)
- 1695519: use correct uuid in kubevirt report (piotr.kliczewski@gmail.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.24.6-1" date="1558699200">- 1530290: Remove enviroment as an input variable for the hypervisor check in
  (wpoteat@redhat.com)
- 1523482: 1519704: Interval value set to empty string will revert to default
  value (wpoteat@redhat.com)
- 1522384: Log at debug level when config uses default entries
  (wpoteat@redhat.com)
- 1708524: update man page with kubevirt backend information
  (piotr.kliczewski@gmail.com)
- 1708534: add kubeconfig to template (piotr.kliczewski@gmail.com)
- 1516209: Configuration should be deemed invalid when server is not specified
  (wpoteat@redhat.com)
- 1506167: Ignore new SIGHUP signals during signal handling
  (jhnidek@redhat.com)
- 1522661: Constrict is_hypervisor field to fake virt (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.24.7-1" date="1560772800">- 1718304: Fix issue when instance["BIOSGUID"] returns None
  (phess@users.noreply.github.com)
- 1472727: Log error, when encrypted password is missing; ENT-1344
  (jhnidek@redhat.com)</changelog>
</package>
<package pkgid="10a776e02d5a13dcd3d89e26385940178e7c358c67f2868c82197c3066a0f31f" name="virt-who" arch="src">
  <version epoch="0" ver="0.26.5" rel="1.el7"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.24.4-1" date="1554292800">- 1667522: Omit ESX host from report when no hostname is present
  (wpoteat@redhat.com)
- 1693858: Send hardware uuid on every check in for system reconcilliation
  (wpoteat@redhat.com)
- kubevirt: provide user authentication (piotr.kliczewski@gmail.com)
- 1486270: pass no_proxy from config files (wpoteat@redhat.com)
- kubevirt: drop kubernetes and kubevirt dependencies
  (piotr.kliczewski@gmail.com)
- 1638250: Improved fix for http proxy issue (wpoteat@redhat.com)
- Update releaser (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.24.5-1" date="1555502400">- 1695538: Provide support for hypervisor_id option
  (piotr.kliczewski@gmail.com)
- 1695519: use correct uuid in kubevirt report (piotr.kliczewski@gmail.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.24.6-1" date="1558699200">- 1530290: Remove enviroment as an input variable for the hypervisor check in
  (wpoteat@redhat.com)
- 1523482: 1519704: Interval value set to empty string will revert to default
  value (wpoteat@redhat.com)
- 1522384: Log at debug level when config uses default entries
  (wpoteat@redhat.com)
- 1708524: update man page with kubevirt backend information
  (piotr.kliczewski@gmail.com)
- 1708534: add kubeconfig to template (piotr.kliczewski@gmail.com)
- 1516209: Configuration should be deemed invalid when server is not specified
  (wpoteat@redhat.com)
- 1506167: Ignore new SIGHUP signals during signal handling
  (jhnidek@redhat.com)
- 1522661: Constrict is_hypervisor field to fake virt (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.24.7-1" date="1560772800">- 1718304: Fix issue when instance["BIOSGUID"] returns None
  (phess@users.noreply.github.com)
- 1472727: Log error, when encrypted password is missing; ENT-1344
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.26.0-1" date="1565265600">- 1530254: Update checking on environment variables (wpoteat@redhat.com)
- 1714456: Update description of 'print_' config option (wpoteat@redhat.com)
- 1720051: Restore the entries marked as deprecated (wpoteat@redhat.com)
- 1652549: Add heartbeat call to virt-who cycle (wpoteat@redhat.com)
- 1720154: Provide SYSTEM_UUID_FACT (piotr.kliczewski@gmail.com)
- 1516120: Handling for incorrect config section headers (wpoteat@redhat.com)
- 1722560: Make heartbeat more robust (jhnidek@redhat.com)
- 1416298: Use unique guest attribute for state tracking (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.26.1-1" date="1565870400">- 1447633: Update spec file to match RHEL 7.8 Subscription Manager
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.26.2-1" date="1568289600">- 1720048: Template for general configuration not properly formatted
  (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.26.3-1" date="1568980800">- 1745768: Make message unicode safe (wpoteat@redhat.com)
- 1516209: Proper handling for empty server entry (wpoteat@redhat.com)
- 1712300: add connection/request timeout (piotr.kliczewski@gmail.com)
- 1751122: Clear ENV refereces from files (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.26.4-1" date="1572264000">- 1751441: remove strict need for kubeconfig (piotr.kliczewski@gmail.com)
- 1751624: Allow unicode username only if python-requests allows it
  (wpoteat@redhat.com)
- 1743589: Content type header null coverage (wpoteat@redhat.com)
- 1727130: Correct man page for default interval (wpoteat@redhat.com)
- 1519136: remove references to deprecated configuration (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.26.5-1" date="1576756800">- 1759869: Version file needs updating on rpm (wpoteat@redhat.com)</changelog>
</package>
<package pkgid="ad64c3132c53aa63f427fc3094e0badbf0e183139763a00e7858284bc073101c" name="virt-who" arch="src">
  <version epoch="0" ver="0.28.9" rel="1.el7"/>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.26.5-1" date="1576756800">- 1759869: Version file needs updating on rpm (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.28.1-1" date="1581595200">- 1780467: Validate rhevm password when unicode is not allowed
  (wpoteat@redhat.com)
- 1751441: Add command line path parameter (piotr.kliczewski@gmail.com)
- 1762780: fix bug, when reporter_id is empty; ENT-1706 (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.28.2-1" date="1582632000">- 1760161: Command line arguments need to be in man page (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.28.3-1" date="1584619200">- 1775535: config option to override api version (piotr.kliczewski@gmail.com)
- Update releasers for new version (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.28.4-1" date="1587124800">- 1806572: virt-who using V3 APIs for communication with RHEVM which is
  deprecated (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.28.5-1" date="1588334400">- 1748677: Improved timeout for esx (wpoteat@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.28.6-1" date="1590062400">- 1806572: RHEVM should only use version 4 (wpoteat@redhat.com)
- Update to tests to match changes in Subscription Manager (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.28.7-1" date="1590580800">- 1835132: support milicpus (piotr.kliczewski@gmail.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.28.8-1" date="1591876800">- 1844364: better behavior of --config option (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.28.9-1" date="1592568000">- 1809098: Convert UUID to big-endian for certain esx hardware versions
  (wpoteat@redhat.com)</changelog>
</package>
<package pkgid="c368814390a9d03d29073dead9b370f5460d96dec4328fd36664a41d3c861533" name="vsftpd" arch="src">
  <version epoch="0" ver="3.0.2" rel="29.el7_9"/>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 3.0.2-20" date="1460030400">- Resolves: #1147551 - Missing isolate_* options, incorrect default values of
  max_clients, max_per_ip in man vsftpd.conf</changelog>
  <changelog author="Martin Sehnoutka &lt;msehnout@redhat.com&gt; - 3.0.2-21" date="1464868800">- Resolves: #1318947 vsftpd should permit specified TLS versions only</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 3.0.2-22" date="1490270400">- Resolves: #1432054 - secure ftp stopped working with default TLS settings in the new vsftpd package</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.0.2-23" date="1522929600">- Redefine VSFTP_COMMAND_FD to 1
- Resolves: rhbz#1443055
- Document the relationship of text_userdb_names and chroot_local_user
- Resolves: rhbz#1508021
- Document allow_writeable_chroot in the man page
- Resolves: rhbz#1508022
- Improve documentation of ascii_* options
- Resolves: rhbz#1517227
- Add new filename generation algorithm for STOU command
- Resolves: rhbz#1479237</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.0.2-24" date="1526472000">- Fix reverse hostname lookup with IPv6
- Resolves: rhbz#1576705</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.0.2-25" date="1529582400">- Add config option log_die allowing to pass error messages to syslog
- Add config option bind_retries allowing to change the max number
- of attempts to find a listening port for the PASV/EPSV command
- Resolves: rhbz#1318198</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.0.2-26" date="1565006400">- Fix segfault when listen() returns an error
- Resolves: rhbz#1666380</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.0.2-27" date="1565006401">- Partially fix problem with bad utmp entries when pututxline() fails
- Resolves: rhbz#1688848</changelog>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 3.0.2-28" date="1583409600">- Fix timestamp handling in MDTM
- Resolves: rhbz#1583247</changelog>
  <changelog author="Artem Egorenkov &lt;aegorenk@redhat.com&gt; - 3.0.2-29" date="1617883200">- Enable support for wide-character strings in logs
- Replace unprintables with HEX code, not question marks
- Resolves: rhbz#1922809</changelog>
</package>
<package pkgid="7e37bd59fdb3b43502a7f37c43d147141f9730f81b7587e0e2a1d24a41c3bc78" name="webkitgtk4" arch="src">
  <version epoch="0" ver="2.28.2" rel="3.el7"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.20.3-5" date="1530100800">- Add GStreamer coverity fixes
- Resolves: rhbz#1576544</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.20.4-1" date="1533556800">- Update to 2.20.4
- Resolves: rhbz#1576544
- WebKitWebProcess crashes when a11y is active
- Resolves: rhbz#1591638</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.20.4-2" date="1533816000">- webkitgtk4: Crash on Google login page when a11y is active
- Resolves: rhbz#1503624
- Revert patch causing rendering glitches</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.20.5-1" date="1534248000">- Update to 2.20.5 - technically it was not necessary as the only difference
  between 2.20.4 and .5 was the revert of one change, that we already reverted
  while building 2.20.4. But it's better to stay with upstream.
- Update the labels patch with the version that was pushed upstream.
- Resolves: rhbz#1576544</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 2.22.6-1" date="1549972800">- Resolves: rhbz#1669482 Rebase to 2.22.6</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 2.22.7-1" date="1553515200">- Related: rhbz#1669482 Update to 2.22.7</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 2.22.7-2" date="1554379200">- Related: rhbz#1669482 covscan fixes</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.28.2-1" date="1590062400">- Resolves: rhbz#1817144 Rebase to 2.28.2</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.28.2-2" date="1592654400">- Resolves: rhbz#1817144 Rebuild to support ppc and s390</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.28.2-3" date="1632830400">- Fix CVE-2021-30858
- Resolves: #2006421</changelog>
</package>
<package pkgid="dbdd4dcb13573a9c7dd080eac8d20e2fb1693f194f7a8da037362275fe41076a" name="wpa_supplicant" arch="src">
  <version epoch="1" ver="2.6" rel="12.el7_9.2"/>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:2.6-4" date="1491220800">- Include MACsec headers (rh #1438007)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-5" date="1495022400">- macsec: Fix segmentation fault in case macsec.ko is not loaded (rh #1440646)
- nl80211: Fix race condition in detecting MAC change (rh #1447073)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-6" date="1507204800">- Fix segmentation fault on EAPOL RX if macsec.ko is not loaded (rh #1489919)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-7" date="1508328000">- avoid key reinstallation (CVE-2017-13077, CVE-2017-13078, CVE-2017-13079,
  CVE-2017-13080, CVE-2017-13081, CVE-2017-13082, CVE-2017-13086,
  CVE-2017-13087, CVE-2017-13088)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-8" date="1515153600">- Fix build issue on kernel-alt (rh #1531254)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-9" date="1515412800">- Fix RPMDiff failures on ppc (rh #1532320)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-10" date="1526644800">- Fix memory leak when macsec MKA/PSK is used (rh #1500442)
- Fix authentication failure when the MAC is updated externally (rh #1490885)
- Let the kernel discard EAPOL if packet type is PACKET_OTHERHOST (rh #1434434)
- Don't restart wpa_supplicant.service on package upgrade (rh #1505404)
- Don't own a directory in /run/ (rh #1507919)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-11" date="1527854400">- Better handling of /run/wpa_supplicant (rh #1507919)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-12" date="1535457600">- Ignore unauthenticated encrypted EAPOL-Key data (CVE-2018-14526)</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 1:2.6-12.1" date="1615204800">- P2P: Fix a corner case in peer addition based on PD Request (CVE-2021-27803)</changelog>
</package>
<package pkgid="aed1b97e2ca2b04405924d67d148240369a9a1144bda4c153a4f3cf716647abb" name="x3270" arch="src">
  <version epoch="0" ver="3.3.12ga12" rel="5.el7_9"/>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.3.12ga11-1" date="1347019200">- updated to 3.3.12ga11</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.3.12ga11-2" date="1348228800">- enable DBCS character sets (#801139)</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.3.12ga11-3" date="1348747200">- cleanup of BuildRequires</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dan[at]danny.cz&gt; - 3.3.12ga11-4" date="1353585600">- fix license (BSD instead of MIT)</changelog>
  <changelog author="Parag Nemade &lt;paragn AT fedoraproject DOT org&gt; - 3.3.12ga11-5" date="1360497600">- Remove vendor tag from desktop file as per https://fedorahosted.org/fesco/ticket/1077
- Cleanup spec as per recently changed packaging guidelines</changelog>
  <changelog author="Samantha N. Bueno &lt;sbueno[at]redhat.com&gt; - 3.3.12ga12-1" date="1364212800">- updated to 3.3.12ga12
- fixes CVE-2012-5662 (#889373, #924228)
- add support for aarch64 to build system (#926737)</changelog>
  <changelog author="Samantha N. Bueno &lt;sbueno[at]redhat.com&gt; - 3.3.12ga12-2" date="1364212801">- Rebuilt to include fix for #926737</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3.12ga12-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.3.12ga12-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Jakub &#x10C;ajka &lt;jcajka@redhat.com&gt; - 3.3.12ga12-5" date="1635854400">- Fix sigill in c3270
- Resolves: BZ#2012913</changelog>
</package>
<package pkgid="e208712b8b4eaf5d369c9af83235b1d33421f3b497c6a17bc75296cd26c9c498" name="xfsdump" arch="src">
  <version epoch="0" ver="3.1.7" rel="2.el7_9"/>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.2-1" date="1355400000">- New upstream release, with non-broken tarball</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.1.2-2" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.3-1" date="1381147200">- Update to version 3.1.3 (#1016306)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.3-2" date="1385380800">- Preserve xattrs on multi-part stream restores (#1034014)
- Prevent segfault on multi-part stream restores (#1034015)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.3-5" date="1392638400">- Preserve file capabilities during xfsrestore (#1013345)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.4-1" date="1392638401">- Fix aarch64 build (#1028131)
- Rebase to 3.1.4 to roll up prior individual patches</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.7-1" date="1509710400">- Rebase to build against current RHEL7 xfsprogs headers
- Fix race condition between lseek() and read()/write() (#1086532)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.7-2" date="1509710401">- Fix bind mount vs root inode problems (#1698057)</changelog>
</package>
<package pkgid="d5c611e6f7811b785517c974eafa6bd610c110ba742ca5f21e6f262caffd6c96" name="xfsdump" arch="src">
  <version epoch="0" ver="3.1.7" rel="3.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.1.2-2" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.3-1" date="1381147200">- Update to version 3.1.3 (#1016306)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.3-2" date="1385380800">- Preserve xattrs on multi-part stream restores (#1034014)
- Prevent segfault on multi-part stream restores (#1034015)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.3-5" date="1392638400">- Preserve file capabilities during xfsrestore (#1013345)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.4-1" date="1392638401">- Fix aarch64 build (#1028131)
- Rebase to 3.1.4 to roll up prior individual patches</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.7-1" date="1509710400">- Rebase to build against current RHEL7 xfsprogs headers
- Fix race condition between lseek() and read()/write() (#1086532)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.7-2" date="1658318400">- Fix bind mount vs root inode problems (#1698057)</changelog>
  <changelog author="Donald Douwsma &lt;ddouwsma@redhat.com&gt; 3.1.7-3" date="1674648000">- Fix restoring inventory from tape (#2054511)</changelog>
</package>
<package pkgid="35cc16251d6183b6d0724d43a8e1b0a6ab785b3c3638379f09644ef847e6ba19" name="xfsdump" arch="src">
  <version epoch="0" ver="3.1.7" rel="4.el7_9"/>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.3-1" date="1381147200">- Update to version 3.1.3 (#1016306)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.3-2" date="1385380800">- Preserve xattrs on multi-part stream restores (#1034014)
- Prevent segfault on multi-part stream restores (#1034015)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.3-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.1.3-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.3-5" date="1392638400">- Preserve file capabilities during xfsrestore (#1013345)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.4-1" date="1392638401">- Fix aarch64 build (#1028131)
- Rebase to 3.1.4 to roll up prior individual patches</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.7-1" date="1509710400">- Rebase to build against current RHEL7 xfsprogs headers
- Fix race condition between lseek() and read()/write() (#1086532)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 3.1.7-2" date="1658318400">- Fix bind mount vs root inode problems (#1698057)</changelog>
  <changelog author="Donald Douwsma &lt;ddouwsma@redhat.com&gt; 3.1.7-3" date="1674648000">- Fix restoring inventory from tape (#2054511)</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 3.1.7-4" date="1698062400">- Batch fixing several issues
- xfsrestore: Files from the backup go to orphanage dir because of xfsdump
-      issue, Related: RHEL-10529
- xfsdump/xfsrestore: suggest recovery for false roots may be possible using -x,
-      Related: RHEL-14912</changelog>
</package>
<package pkgid="dab0c5377ad48e6acb8a56abe0218281b22dff70a7611db353256f66808cc54b" name="xmlsec1" arch="src">
  <version epoch="0" ver="1.2.20" rel="8.el7_9"/>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-5" date="1400846400">- Add patch to deal with different behavior of pkg-config in RHEL6</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.19-6" date="1400846401">- Fix incomplete patch</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-1" date="1401278400">- New upstrema version with memleaks, crl checks and other fixes
- enable make check during build
- drop ecdsa patch as it has been included upstream</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-2" date="1401278401">- Update pkg-config fix patch to apply w/o fuzz</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-3" date="1401796800">- Make RPMDiff happy by adding a strict require on subpackage</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-4" date="1401969600">- Add fixes from upstream
- These were sent by us after covscan checks revelead errors</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-5" date="1409918400">- Add package to RHEL7
- Resolves: #1118038</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-6" date="1500379200">- CVE-2017-1000061
- Resolves: #1472091</changelog>
  <changelog author="Simo Sorce &lt;simo@redhat.com&gt; - 1.2.20-7" date="1502280000">- CVE-2017-1000061
- Related: #1472092
- Resolves: #1472091
- Fix mis-applied patch hunk</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.2.20-8" date="1697025600">- xmlsec1 fails to validate XML signatures made using ECDSA algorithm in FIPS mode
- Resolves: RHEL-3337</changelog>
</package>
<package pkgid="d0128591d3f3fdf2fed1011ff341f313566779e8849272b94ea280d6442f1010" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.4" rel="12.el7_9"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.20.4-2" date="1554206400">- Don't reset last.valuators on slave device switch (#1640207)</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.20.4-3" date="1554292800">- Backport fix for 1612924 - enabled monitors</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-5" date="1556193600">- Fix a crash in RRProviderAutoConfigGpuScreen</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.20.4-6" date="1557144000">- Stop VT switching when inactive server dies
  Resolves: #1680120</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-7" date="1559044800">- Fix a segfault with non-PCI platform devices (and other cases)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-8" date="1560945600">- Fix platform device PCI detection with complex bus topologies</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-9" date="1565697600">- Fix a crash when destroying a redirected window with backing store</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-10" date="1578484800">- Set fallback DRI2 driver names for Intel and AMD</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-11" date="1603972800">- Fix a crash when moving an animated cursor between screens
- Be case-insentive when matching extension names to enable or disable</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.20.4-12" date="1604059200">- CVE fixes for: CVE-2020-14345 (#1872389), CVE-2020-14346 (#1872393),
  CVE-2020-14361 (#1872400), CVE-2020-14362 (#1872407)
- Temporarily revert fixes from 1.20.4-11 build for delivery of CVE fixes</changelog>
</package>
<package pkgid="b03297e2d301fd4d6d356ba195ed96a83d45610aeea8a412fbe34eaaf4529af9" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.4" rel="13.el7_9"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; - 1.20.4-3" date="1554292800">- Backport fix for 1612924 - enabled monitors</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-5" date="1556193600">- Fix a crash in RRProviderAutoConfigGpuScreen</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.20.4-6" date="1557144000">- Stop VT switching when inactive server dies
  Resolves: #1680120</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-7" date="1559044800">- Fix a segfault with non-PCI platform devices (and other cases)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-8" date="1560945600">- Fix platform device PCI detection with complex bus topologies</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-9" date="1565697600">- Fix a crash when destroying a redirected window with backing store</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-10" date="1578484800">- Set fallback DRI2 driver names for Intel and AMD</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-11" date="1603972800">- Fix a crash when moving an animated cursor between screens
- Be case-insentive when matching extension names to enable or disable</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.20.4-12" date="1604059200">- CVE fixes for: CVE-2020-14345 (#1872389), CVE-2020-14346 (#1872393),
  CVE-2020-14361 (#1872400), CVE-2020-14362 (#1872407)
- Temporarily revert fixes from 1.20.4-11 build for delivery of CVE fixes</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.20.4-13" date="1604318400">- Re-apply fixes from 1.20.4-11</changelog>
</package>
<package pkgid="92562615f914a552c0fb9cc8240ddf6650f0a83b83b5e3bba7a7494cc5f905fc" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.4" rel="15.el7_9"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 1.20.4-6" date="1557144000">- Stop VT switching when inactive server dies
  Resolves: #1680120</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-7" date="1559044800">- Fix a segfault with non-PCI platform devices (and other cases)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-8" date="1560945600">- Fix platform device PCI detection with complex bus topologies</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-9" date="1565697600">- Fix a crash when destroying a redirected window with backing store</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-10" date="1578484800">- Set fallback DRI2 driver names for Intel and AMD</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-11" date="1603972800">- Fix a crash when moving an animated cursor between screens
- Be case-insentive when matching extension names to enable or disable</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.20.4-12" date="1604059200">- CVE fixes for: CVE-2020-14345 (#1872389), CVE-2020-14346 (#1872393),
  CVE-2020-14361 (#1872400), CVE-2020-14362 (#1872407)
- Temporarily revert fixes from 1.20.4-11 build for delivery of CVE fixes</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.20.4-13" date="1604318400">- Re-apply fixes from 1.20.4-11</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-14" date="1607601600">- CVE fix for: CVE-2020-14347 (#1862319)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-15" date="1607601601">- CVE fix for: CVE-2020-25712 (#1904937), CVE-2020-14360 (#1904934)</changelog>
</package>
<package pkgid="3136ba9afeaec7750d41b732f980e76f1b748404b8e3bacd9db1badcc464aca1" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.4" rel="16.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-7" date="1559044800">- Fix a segfault with non-PCI platform devices (and other cases)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-8" date="1560945600">- Fix platform device PCI detection with complex bus topologies</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-9" date="1565697600">- Fix a crash when destroying a redirected window with backing store</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-10" date="1578484800">- Set fallback DRI2 driver names for Intel and AMD</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-11" date="1603972800">- Fix a crash when moving an animated cursor between screens
- Be case-insentive when matching extension names to enable or disable</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.20.4-12" date="1604059200">- CVE fixes for: CVE-2020-14345 (#1872389), CVE-2020-14346 (#1872393),
  CVE-2020-14361 (#1872400), CVE-2020-14362 (#1872407)
- Temporarily revert fixes from 1.20.4-11 build for delivery of CVE fixes</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.20.4-13" date="1604318400">- Re-apply fixes from 1.20.4-11</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-14" date="1607601600">- CVE fix for: CVE-2020-14347 (#1862319)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-15" date="1607601601">- CVE fix for: CVE-2020-25712 (#1904937), CVE-2020-14360 (#1904934)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-16" date="1620648000">- CVE fix for: CVE-2021-3472 (#1944956)</changelog>
</package>
<package pkgid="d27343584bce0ca3455c3c15f7a1217800d5234ba7aa20daf0de5a9cd73470d9" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.4" rel="17.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-8" date="1560945600">- Fix platform device PCI detection with complex bus topologies</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-9" date="1565697600">- Fix a crash when destroying a redirected window with backing store</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-10" date="1578484800">- Set fallback DRI2 driver names for Intel and AMD</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-11" date="1603972800">- Fix a crash when moving an animated cursor between screens
- Be case-insentive when matching extension names to enable or disable</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.20.4-12" date="1604059200">- CVE fixes for: CVE-2020-14345 (#1872389), CVE-2020-14346 (#1872393),
  CVE-2020-14361 (#1872400), CVE-2020-14362 (#1872407)
- Temporarily revert fixes from 1.20.4-11 build for delivery of CVE fixes</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.20.4-13" date="1604318400">- Re-apply fixes from 1.20.4-11</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-14" date="1607601600">- CVE fix for: CVE-2020-14347 (#1862319)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-15" date="1607601601">- CVE fix for: CVE-2020-25712 (#1904937), CVE-2020-14360 (#1904934)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-16" date="1620648000">- CVE fix for: CVE-2021-3472 (#1944956)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-17" date="1640088000">- CVE fix for: CVE-2021-4008 (#2030161), CVE-2021-4009 (#2030171),
  CVE-2021-4010 (#2030176), CVE-2021-4011 (#2030180)</changelog>
</package>
<package pkgid="ef9c8ea5ffcde427979b146f74f3cf92bd25ac3029d9a36279ae7d678379990c" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.4" rel="18.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-9" date="1565697600">- Fix a crash when destroying a redirected window with backing store</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-10" date="1578484800">- Set fallback DRI2 driver names for Intel and AMD</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-11" date="1603972800">- Fix a crash when moving an animated cursor between screens
- Be case-insentive when matching extension names to enable or disable</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.20.4-12" date="1604059200">- CVE fixes for: CVE-2020-14345 (#1872389), CVE-2020-14346 (#1872393),
  CVE-2020-14361 (#1872400), CVE-2020-14362 (#1872407)
- Temporarily revert fixes from 1.20.4-11 build for delivery of CVE fixes</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.20.4-13" date="1604318400">- Re-apply fixes from 1.20.4-11</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-14" date="1607601600">- CVE fix for: CVE-2020-14347 (#1862319)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-15" date="1607601601">- CVE fix for: CVE-2020-25712 (#1904937), CVE-2020-14360 (#1904934)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-16" date="1620648000">- CVE fix for: CVE-2021-3472 (#1944956)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-17" date="1640088000">- CVE fix for: CVE-2021-4008 (#2030161), CVE-2021-4009 (#2030171),
  CVE-2021-4010 (#2030176), CVE-2021-4011 (#2030180)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-18" date="1658750400">- CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
  Resolves: rhbz#2109031, rhbz#2109033</changelog>
</package>
<package pkgid="f42b59368144e81d5125e2f8e75cee294f9845934dc4ee163e944dc410e273e1" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.4" rel="19.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-10" date="1578484800">- Set fallback DRI2 driver names for Intel and AMD</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-11" date="1603972800">- Fix a crash when moving an animated cursor between screens
- Be case-insentive when matching extension names to enable or disable</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.20.4-12" date="1604059200">- CVE fixes for: CVE-2020-14345 (#1872389), CVE-2020-14346 (#1872393),
  CVE-2020-14361 (#1872400), CVE-2020-14362 (#1872407)
- Temporarily revert fixes from 1.20.4-11 build for delivery of CVE fixes</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.20.4-13" date="1604318400">- Re-apply fixes from 1.20.4-11</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-14" date="1607601600">- CVE fix for: CVE-2020-14347 (#1862319)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-15" date="1607601601">- CVE fix for: CVE-2020-25712 (#1904937), CVE-2020-14360 (#1904934)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-16" date="1620648000">- CVE fix for: CVE-2021-3472 (#1944956)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-17" date="1640088000">- CVE fix for: CVE-2021-4008 (#2030161), CVE-2021-4009 (#2030171),
  CVE-2021-4010 (#2030176), CVE-2021-4011 (#2030180)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-18" date="1658750400">- CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
  Resolves: rhbz#2109031, rhbz#2109033</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-19" date="1667995200">- CVE fix for: CVE-2022-3550, CVE-2022-3551
  Resolves: rhbz#2140765, rhbz#2140770</changelog>
</package>
<package pkgid="f39ab2e759c5da9286ce32bbd7307314b59147b94f2ea81085f45c83b70fd3c8" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.4" rel="21.el7_9"/>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.20.4-12" date="1604059200">- CVE fixes for: CVE-2020-14345 (#1872389), CVE-2020-14346 (#1872393),
  CVE-2020-14361 (#1872400), CVE-2020-14362 (#1872407)
- Temporarily revert fixes from 1.20.4-11 build for delivery of CVE fixes</changelog>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.20.4-13" date="1604318400">- Re-apply fixes from 1.20.4-11</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-14" date="1607601600">- CVE fix for: CVE-2020-14347 (#1862319)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-15" date="1607601601">- CVE fix for: CVE-2020-25712 (#1904937), CVE-2020-14360 (#1904934)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-16" date="1620648000">- CVE fix for: CVE-2021-3472 (#1944956)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-17" date="1640088000">- CVE fix for: CVE-2021-4008 (#2030161), CVE-2021-4009 (#2030171),
  CVE-2021-4010 (#2030176), CVE-2021-4011 (#2030180)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-18" date="1658750400">- CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
  Resolves: rhbz#2109031, rhbz#2109033</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-19" date="1667995200">- CVE fix for: CVE-2022-3550, CVE-2022-3551
  Resolves: rhbz#2140765, rhbz#2140770</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-20" date="1670587200">- CVE fix for: CVE-2022-4283 (#2151800), CVE-2022-46340 (#2151775),
  CVE-2022-46341 (#2151780), CVE-2022-46342 (#2151787),
  CVE-2022-46343 (#2151790), CVE-2022-46344 (#2151797)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-21" date="1671451200">- Follow-up fix for CVE-2022-46340 (#2151775)</changelog>
</package>
<package pkgid="dc0a80b6f57f53c5a87560edc01d4a87bcc7b15ab14e620832c8ac278f29b7f1" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.4" rel="22.el7_9"/>
  <changelog author="Michel D&#xE4;nzer &lt;mdaenzer@redhat.com&gt; - 1.20.4-13" date="1604318400">- Re-apply fixes from 1.20.4-11</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-14" date="1607601600">- CVE fix for: CVE-2020-14347 (#1862319)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-15" date="1607601601">- CVE fix for: CVE-2020-25712 (#1904937), CVE-2020-14360 (#1904934)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-16" date="1620648000">- CVE fix for: CVE-2021-3472 (#1944956)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-17" date="1640088000">- CVE fix for: CVE-2021-4008 (#2030161), CVE-2021-4009 (#2030171),
  CVE-2021-4010 (#2030176), CVE-2021-4011 (#2030180)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-18" date="1658750400">- CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
  Resolves: rhbz#2109031, rhbz#2109033</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-19" date="1667995200">- CVE fix for: CVE-2022-3550, CVE-2022-3551
  Resolves: rhbz#2140765, rhbz#2140770</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-20" date="1670587200">- CVE fix for: CVE-2022-4283 (#2151800), CVE-2022-46340 (#2151775),
  CVE-2022-46341 (#2151780), CVE-2022-46342 (#2151787),
  CVE-2022-46343 (#2151790), CVE-2022-46344 (#2151797)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-21" date="1671451200">- Follow-up fix for CVE-2022-46340 (#2151775)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-22" date="1675425600">- CVE fix for: CVE-2023-0494 (#2166513)</changelog>
</package>
<package pkgid="a850880406595504cd5f7057ade821e64737836636c612fd96b48774325bbe1e" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.4" rel="23.el7_9"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-14" date="1607601600">- CVE fix for: CVE-2020-14347 (#1862319)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-15" date="1607601601">- CVE fix for: CVE-2020-25712 (#1904937), CVE-2020-14360 (#1904934)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-16" date="1620648000">- CVE fix for: CVE-2021-3472 (#1944956)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-17" date="1640088000">- CVE fix for: CVE-2021-4008 (#2030161), CVE-2021-4009 (#2030171),
  CVE-2021-4010 (#2030176), CVE-2021-4011 (#2030180)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-18" date="1658750400">- CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
  Resolves: rhbz#2109031, rhbz#2109033</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-19" date="1667995200">- CVE fix for: CVE-2022-3550, CVE-2022-3551
  Resolves: rhbz#2140765, rhbz#2140770</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-20" date="1670587200">- CVE fix for: CVE-2022-4283 (#2151800), CVE-2022-46340 (#2151775),
  CVE-2022-46341 (#2151780), CVE-2022-46342 (#2151787),
  CVE-2022-46343 (#2151790), CVE-2022-46344 (#2151797)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-21" date="1671451200">- Follow-up fix for CVE-2022-46340 (#2151775)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-22" date="1675425600">- CVE fix for: CVE-2023-0494 (#2166513)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-23" date="1680091200">- CVE fix for: CVE-2023-1393 (#2180290)</changelog>
</package>
<package pkgid="63b4cbac1fee6cf7c07f5ed27607577283bd97eb79c9885dd2d12f143243b7eb" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.4" rel="24.el7_9"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-15" date="1607601600">- CVE fix for: CVE-2020-25712 (#1904937), CVE-2020-14360 (#1904934)</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-16" date="1620648000">- CVE fix for: CVE-2021-3472 (#1944956)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-17" date="1640088000">- CVE fix for: CVE-2021-4008 (#2030161), CVE-2021-4009 (#2030171),
  CVE-2021-4010 (#2030176), CVE-2021-4011 (#2030180)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-18" date="1658750400">- CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
  Resolves: rhbz#2109031, rhbz#2109033</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-19" date="1667995200">- CVE fix for: CVE-2022-3550, CVE-2022-3551
  Resolves: rhbz#2140765, rhbz#2140770</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-20" date="1670587200">- CVE fix for: CVE-2022-4283 (#2151800), CVE-2022-46340 (#2151775),
  CVE-2022-46341 (#2151780), CVE-2022-46342 (#2151787),
  CVE-2022-46343 (#2151790), CVE-2022-46344 (#2151797)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-21" date="1671451200">- Follow-up fix for CVE-2022-46340 (#2151775)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-22" date="1675425600">- CVE fix for: CVE-2023-0494 (#2166513)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-23" date="1680091200">- CVE fix for: CVE-2023-1393 (#2180290)</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.4-24" date="1698235200">- CVE fix for: CVE-2023-5367
  Resolves: https://issues.redhat.com/browse/RHEL-13424</changelog>
</package>
<package pkgid="7271a6ea68b025aee60240f234e74a4d9b1dfa5834f25958715baa6adf49dd56" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.4" rel="25.el7_9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.20.4-16" date="1620648000">- CVE fix for: CVE-2021-3472 (#1944956)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-17" date="1640088000">- CVE fix for: CVE-2021-4008 (#2030161), CVE-2021-4009 (#2030171),
  CVE-2021-4010 (#2030176), CVE-2021-4011 (#2030180)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-18" date="1658750400">- CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
  Resolves: rhbz#2109031, rhbz#2109033</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-19" date="1667995200">- CVE fix for: CVE-2022-3550, CVE-2022-3551
  Resolves: rhbz#2140765, rhbz#2140770</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-20" date="1670587200">- CVE fix for: CVE-2022-4283 (#2151800), CVE-2022-46340 (#2151775),
  CVE-2022-46341 (#2151780), CVE-2022-46342 (#2151787),
  CVE-2022-46343 (#2151790), CVE-2022-46344 (#2151797)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-21" date="1671451200">- Follow-up fix for CVE-2022-46340 (#2151775)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-22" date="1675425600">- CVE fix for: CVE-2023-0494 (#2166513)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-23" date="1680091200">- CVE fix for: CVE-2023-1393 (#2180290)</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.4-24" date="1698235200">- CVE fix for: CVE-2023-5367
  Resolves: https://issues.redhat.com/browse/RHEL-13424</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.4-25" date="1702555200">- CVE fix for: CVE-2023-6377, CVE-2023-6478
  Resolves: https://issues.redhat.com/browse/RHEL-18416
  Resolves: https://issues.redhat.com/browse/RHEL-18428</changelog>
</package>
<package pkgid="184ab9221282220eb79f4c9ce68d18f6f7749762ffd8bc9dd1e23e02c64c1e99" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.4" rel="27.el7_9"/>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-18" date="1658750400">- CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
  Resolves: rhbz#2109031, rhbz#2109033</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-19" date="1667995200">- CVE fix for: CVE-2022-3550, CVE-2022-3551
  Resolves: rhbz#2140765, rhbz#2140770</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-20" date="1670587200">- CVE fix for: CVE-2022-4283 (#2151800), CVE-2022-46340 (#2151775),
  CVE-2022-46341 (#2151780), CVE-2022-46342 (#2151787),
  CVE-2022-46343 (#2151790), CVE-2022-46344 (#2151797)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-21" date="1671451200">- Follow-up fix for CVE-2022-46340 (#2151775)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-22" date="1675425600">- CVE fix for: CVE-2023-0494 (#2166513)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-23" date="1680091200">- CVE fix for: CVE-2023-1393 (#2180290)</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.4-24" date="1698235200">- CVE fix for: CVE-2023-5367
  Resolves: https://issues.redhat.com/browse/RHEL-13424</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.4-25" date="1702555200">- CVE fix for: CVE-2023-6377, CVE-2023-6478
  Resolves: https://issues.redhat.com/browse/RHEL-18416
  Resolves: https://issues.redhat.com/browse/RHEL-18428</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.4-26" date="1705406400">- CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
  CVE-2024-0408 and CVE-2024-0409
  Resolves: https://issues.redhat.com/browse/RHEL-21205
  Resolves: https://issues.redhat.com/browse/RHEL-20578
  Resolves: https://issues.redhat.com/browse/RHEL-20426
  Resolves: https://issues.redhat.com/browse/RHEL-20437
  Resolves: https://issues.redhat.com/browse/RHEL-21192
  Resolves: https://issues.redhat.com/browse/RHEL-21201</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.4-27" date="1705579200">- Fix use after free related to CVE-2024-21886</changelog>
</package>
<package pkgid="eceb3f1cad18a4230ffa8c783a3f078c48efb5f2eb0ec1187ec53ece1820cf31" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.4" rel="29.el7_9.0.1"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-21" date="1671451200">- Follow-up fix for CVE-2022-46340 (#2151775)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-22" date="1675425600">- CVE fix for: CVE-2023-0494 (#2166513)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-23" date="1680091200">- CVE fix for: CVE-2023-1393 (#2180290)</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.4-24" date="1698235200">- CVE fix for: CVE-2023-5367
  Resolves: https://issues.redhat.com/browse/RHEL-13424</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.4-25" date="1702555200">- CVE fix for: CVE-2023-6377, CVE-2023-6478
  Resolves: https://issues.redhat.com/browse/RHEL-18416
  Resolves: https://issues.redhat.com/browse/RHEL-18428</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.4-26" date="1705406400">- CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
  CVE-2024-0408 and CVE-2024-0409
  Resolves: https://issues.redhat.com/browse/RHEL-21205
  Resolves: https://issues.redhat.com/browse/RHEL-20578
  Resolves: https://issues.redhat.com/browse/RHEL-20426
  Resolves: https://issues.redhat.com/browse/RHEL-20437
  Resolves: https://issues.redhat.com/browse/RHEL-21192
  Resolves: https://issues.redhat.com/browse/RHEL-21201</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.4-27" date="1705579200">- Fix use after free related to CVE-2024-21886</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.4-28" date="1712232000">- CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and
  CVE-2024-31083
  Resolves: https://issues.redhat.com/browse/RHEL-31003
  Resolves: https://issues.redhat.com/browse/RHEL-30989
  Resolves: https://issues.redhat.com/browse/RHEL-30973
- Add util-linux as a dependency of Xvfb
- Fix compilation error on i686</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.4-29" date="1712750400">- Fix regression caused by the fix for CVE-2024-31083</changelog>
  <changelog author="Josko Plazonic &lt;plazonic@princeton.edu&gt;" date="1730376000">- fix CVE-2024-9632</changelog>
</package>
<package pkgid="30a38f024675837890280d3fd5e23d9c80e7b27ba287987695285a3d32c4a89b" name="xorg-x11-server" arch="src">
  <version epoch="0" ver="1.20.4" rel="29.el7_9"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-20" date="1670587200">- CVE fix for: CVE-2022-4283 (#2151800), CVE-2022-46340 (#2151775),
  CVE-2022-46341 (#2151780), CVE-2022-46342 (#2151787),
  CVE-2022-46343 (#2151790), CVE-2022-46344 (#2151797)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-21" date="1671451200">- Follow-up fix for CVE-2022-46340 (#2151775)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.20.4-22" date="1675425600">- CVE fix for: CVE-2023-0494 (#2166513)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 1.20.4-23" date="1680091200">- CVE fix for: CVE-2023-1393 (#2180290)</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.4-24" date="1698235200">- CVE fix for: CVE-2023-5367
  Resolves: https://issues.redhat.com/browse/RHEL-13424</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.4-25" date="1702555200">- CVE fix for: CVE-2023-6377, CVE-2023-6478
  Resolves: https://issues.redhat.com/browse/RHEL-18416
  Resolves: https://issues.redhat.com/browse/RHEL-18428</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.4-26" date="1705406400">- CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
  CVE-2024-0408 and CVE-2024-0409
  Resolves: https://issues.redhat.com/browse/RHEL-21205
  Resolves: https://issues.redhat.com/browse/RHEL-20578
  Resolves: https://issues.redhat.com/browse/RHEL-20426
  Resolves: https://issues.redhat.com/browse/RHEL-20437
  Resolves: https://issues.redhat.com/browse/RHEL-21192
  Resolves: https://issues.redhat.com/browse/RHEL-21201</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.4-27" date="1705579200">- Fix use after free related to CVE-2024-21886</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.4-28" date="1712232000">- CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and
  CVE-2024-31083
  Resolves: https://issues.redhat.com/browse/RHEL-31003
  Resolves: https://issues.redhat.com/browse/RHEL-30989
  Resolves: https://issues.redhat.com/browse/RHEL-30973
- Add util-linux as a dependency of Xvfb
- Fix compilation error on i686</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.20.4-29" date="1712750400">- Fix regression caused by the fix for CVE-2024-31083</changelog>
</package>
<package pkgid="aae3067626c822d106c34b2f2c819197a328ea6260745db967a2f96ee1378ca3" name="xstream" arch="src">
  <version epoch="0" ver="1.3.1" rel="12.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.1-3" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.1-4" date="1342958400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.1-5" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-6" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-7" date="1373630400">- Update to current packaging guidelines</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-8" date="1380110400">- Disable support for XOM</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.1-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-10" date="1392120000">- Apply upstream security patch
- Resolves: CVE-2013-7285</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-11" date="1607947200">- Fix remote code execution vulnerability
- Resolves: CVE-2020-26217</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-12" date="1608120000">- Rebuild with OpenJDK 7</changelog>
</package>
<package pkgid="289fdf08d92f522a44f0070bccc1573caa04966fdda92ea744f7cb36a5d5f56d" name="xstream" arch="src">
  <version epoch="0" ver="1.3.1" rel="13.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.1-4" date="1342958400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.1-5" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-6" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-7" date="1373630400">- Update to current packaging guidelines</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-8" date="1380110400">- Disable support for XOM</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.1-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-10" date="1392120000">- Apply upstream security patch
- Resolves: CVE-2013-7285</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-11" date="1607947200">- Fix remote code execution vulnerability
- Resolves: CVE-2020-26217</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-12" date="1608120000">- Rebuild with OpenJDK 7</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.3.1-13" date="1618315200">- Fix remote code execution vulnerability
- Resolves: CVE-2021-21344
- Resolves: CVE-2021-21345
- Resolves: CVE-2021-21346
- Resolves: CVE-2021-21347
- Resolves: CVE-2021-21350</changelog>
</package>
<package pkgid="e31586559d7d67bcff1d00e43d146f3bd72a1eaa4abf8cc54218b79ac8dd1b7c" name="xstream" arch="src">
  <version epoch="0" ver="1.3.1" rel="14.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.3.1-5" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-6" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-7" date="1373630400">- Update to current packaging guidelines</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-8" date="1380110400">- Disable support for XOM</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.1-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-10" date="1392120000">- Apply upstream security patch
- Resolves: CVE-2013-7285</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-11" date="1607947200">- Fix remote code execution vulnerability
- Resolves: CVE-2020-26217</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-12" date="1608120000">- Rebuild with OpenJDK 7</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.3.1-13" date="1618315200">- Fix remote code execution vulnerability
- Resolves: CVE-2021-21344
- Resolves: CVE-2021-21345
- Resolves: CVE-2021-21346
- Resolves: CVE-2021-21347
- Resolves: CVE-2021-21350</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.3.1-14" date="1623153600">- Fix remote code execution vulnerability
- Resolves: CVE-2021-29505</changelog>
</package>
<package pkgid="0af6f85a94aad42637c3b2df9323cd03595368df2839dd0b54f82fd49d37dd20" name="xstream" arch="src">
  <version epoch="0" ver="1.3.1" rel="16.el7_9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-7" date="1373630400">- Update to current packaging guidelines</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-8" date="1380110400">- Disable support for XOM</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.3.1-9" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-10" date="1392120000">- Apply upstream security patch
- Resolves: CVE-2013-7285</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-11" date="1607947200">- Fix remote code execution vulnerability
- Resolves: CVE-2020-26217</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-12" date="1608120000">- Rebuild with OpenJDK 7</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.3.1-13" date="1618315200">- Fix remote code execution vulnerability
- Resolves: CVE-2021-21344
- Resolves: CVE-2021-21345
- Resolves: CVE-2021-21346
- Resolves: CVE-2021-21347
- Resolves: CVE-2021-21350</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.3.1-14" date="1623153600">- Fix remote code execution vulnerability
- Resolves: CVE-2021-29505</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.3.1-15" date="1630411200">- Fix remote code execution vulnerabilities
- Resolves: CVE-2021-39139
- Resolves: CVE-2021-39140
- Resolves: CVE-2021-39141
- Resolves: CVE-2021-39144
- Resolves: CVE-2021-39145
- Resolves: CVE-2021-39146
- Resolves: CVE-2021-39147
- Resolves: CVE-2021-39148
- Resolves: CVE-2021-39149
- Resolves: CVE-2021-39150
- Resolves: CVE-2021-39151
- Resolves: CVE-2021-39152
- Resolves: CVE-2021-39153
- Resolves: CVE-2021-39154</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.3.1-16" date="1633953600">- Fix workaround
- Resolves: CVE-2021-39148</changelog>
</package>
<package pkgid="8fbecd6f6d2ba798bc0b9b321744d155517fb8b1152438794143e0e7a491e90f" name="xterm" arch="src">
  <version epoch="0" ver="295" rel="3.el7_9.1"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 288-1" date="1357819200">- update to 288</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 289-1" date="1360324800">- update to 289</changelog>
  <changelog author="Parag Nemade &lt;paragn AT fedoraproject DOT org&gt; - 289-2" date="1360497600">- Remove vendor tag from desktop file as per https://fedorahosted.org/fesco/ticket/1077</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 291-1" date="1362052800">- update to 291</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 292-1" date="1367236800">- update to 292</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 293-1" date="1369828800">- update to 293</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 295-1" date="1373457600">- update to 295</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 295-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 295-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 295-3.1" date="1613390400">- Backport security fix for CVE-2021-27135
- Resolves: rhbz#1927564</changelog>
</package>
<package pkgid="b2f5302c863f5c943657942c6e514aee290a2b1ded2112c4f9142dbfd582860b" name="xz" arch="src">
  <version epoch="0" ver="5.2.2" rel="2.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 5.1.2-3alpha" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Karsten Hopp &lt;karsten@redhat.com&gt; 5.1.2-4alpha" date="1361448000">- add support for ppc64p7 arch (Power7 optimized)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 5.1.2-5alpha" date="1365508800">- fix manual page inconsistencies with help output (private #948533)
- enable/fix the 'xzgrep -h' (private #850898)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.1.2-6alpha" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 5.1.2-7alpha" date="1389355200">- build with -O3 on ppc64 (private #1051078)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 5.1.2-8alpha" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 5.1.2-9alpha" date="1403006400">- better check the version of less binary (#1082639)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 5.1.2-12alpha" date="1436356800">- xzgrep: return 0 when at least one file matches (rhbz#1109123)</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 5.2.2-1" date="1457092800">- rebase to stable release (rhbz#1190713, rhbz#1160193)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 5.2.2-2" date="1654603200">- Fix CVE-2022-1271
  Resolves: CVE-2022-1271</changelog>
</package>
<package pkgid="e270b0627931a31008f41fdea1dde30a5aab7e0ad42d08aeec5a9782c678a62b" name="zenity" arch="src">
  <version epoch="0" ver="3.28.1" rel="2.el7_9"/>
  <changelog author="Richard Hughes &lt;hughsient@gmail.com&gt; - 3.7.2-1" date="1357732800">- Update to 3.7.2</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.7.2-2" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.8.0-1" date="1364299200">- Update to 3.8.0</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.0-2" date="1364299201">- Minor spec file updates for 3.8</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-3" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.0-4" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.0-5" date="1439985600">- Fix non-expanding lists
  Resolves: #1251137</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474545600">- Update to 3.22.0
- Resolves: #1387068</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.28.1-1" date="1528113600">- Update to 3.28.1
- Resolves: #1569809</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 3.28.1-2" date="1652270400">- Fix message dialog label layout (#2053529)</changelog>
</package>
<package pkgid="985b0fa0d0521dfff1cfa2ca724f50c0070cbbc77ae447bf1f9492696b959b90" name="zlib" arch="src">
  <version epoch="0" ver="1.2.7" rel="19.el7_9"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.7-10" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 1.2.7-12" date="1389355200">- resolves: #1051079
  recompiled with -O3 flag for ppc64 arch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-14" date="1406808000">- resolves: #1123500
  recompiled with -O3 flag for ppc64le arch</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.2.7-15" date="1431432000">- Rebuild for rhbz #1123500</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-16" date="1461758400">- Fix serious but very rare decompression bug in inftrees.c (upstream patch)
  resolves: #1127330</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-17" date="1463659200">- Fix writing empty files on gzopen()/gzclose()
  resolves: #1337441</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.7-18" date="1531137600">- Link with -z now for full RELRO</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.7-19" date="1599652800">- fixed accessing password-protected .zip files via libminizip (#1875700)</changelog>
</package>
<package pkgid="f52218bf0fa4bcd49529e5b7742f99e419e03c0e6b541d983969ec766ec89489" name="zlib" arch="src">
  <version epoch="0" ver="1.2.7" rel="20.el7_9"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-11" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 1.2.7-12" date="1389355200">- resolves: #1051079
  recompiled with -O3 flag for ppc64 arch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-14" date="1406808000">- resolves: #1123500
  recompiled with -O3 flag for ppc64le arch</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.2.7-15" date="1431432000">- Rebuild for rhbz #1123500</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-16" date="1461758400">- Fix serious but very rare decompression bug in inftrees.c (upstream patch)
  resolves: #1127330</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-17" date="1463659200">- Fix writing empty files on gzopen()/gzclose()
  resolves: #1337441</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.7-18" date="1531137600">- Link with -z now for full RELRO</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.7-19" date="1599652800">- fixed accessing password-protected .zip files via libminizip (#1875700)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.7-20" date="1649764800">- Resolves: CVE-2018-25032</changelog>
</package>
<package pkgid="d171d19b0fa0054c81899dd591f284295bf8ba55d72bde00859356f7064354c9" name="zlib" arch="src">
  <version epoch="0" ver="1.2.7" rel="21.el7_9"/>
  <changelog author="Peter Schiffer &lt;pschiffe@redhat.com&gt; - 1.2.7-12" date="1389355200">- resolves: #1051079
  recompiled with -O3 flag for ppc64 arch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.7-13" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-14" date="1406808000">- resolves: #1123500
  recompiled with -O3 flag for ppc64le arch</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@redhat.com&gt; 1.2.7-15" date="1431432000">- Rebuild for rhbz #1123500</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-16" date="1461758400">- Fix serious but very rare decompression bug in inftrees.c (upstream patch)
  resolves: #1127330</changelog>
  <changelog author="jchaloup &lt;jchaloup@redhat.com&gt; - 1.2.7-17" date="1463659200">- Fix writing empty files on gzopen()/gzclose()
  resolves: #1337441</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.7-18" date="1531137600">- Link with -z now for full RELRO</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.2.7-19" date="1599652800">- fixed accessing password-protected .zip files via libminizip (#1875700)</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.7-20" date="1649764800">- Resolves: CVE-2018-25032</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.7-21" date="1675080000">- Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
- Resolves: CVE-2022-37434</changelog>
</package>
</otherdata>