# changelog

author: Paul Howarth <paul@city-fan.org> - 1.5.0-5
changelog:
  - Make GeoIP.dat -> GeoIP-initial.dat symlink in %install, not %post,
    and don't %ghost it
  - Run geoipupdate silently in %post and cron job
  - Create empty database files for %ghost to work with old rpm versions
  - Don't try to use noarch subpackages on old rpm versions
  - Update %description to mention database updates
  - Drop outdated README.Fedora


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-7
changelog:
  - Don't download the database in %post (#1029807)
  - Don't download GeoLiteASNum as it's no longer provided.


author: Jan Safranek <jsafrane@redhat.com> - 1.5.0-10
changelog:
  - Added base IPv6 database to GeoIP package
  - Added GeoIP-data subpackage with all other databases (#1201857)


author: Michal Ruprich <mruprich@redhat.com> - 1.5.0-12
changelog:
  - Removed clean section
  - Resolves: #1589860 - Update GeoIP legacy databases
  - Resolves: #1409060 -  Missing symlink at the GeoIP-update package


author: Tomas Korbar <tkorbar@redhat.com> - 32:9.11.4-17.P2
changelog:
  - Prevent deadlock on reload (#1781576)
  - Disable unit test timer_test on ppc64le because of its instability


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.4-23.P2
changelog:
  - Limit number of queries triggered by a request (CVE-2020-8616)
  - Fix invalid tsig request (CVE-2020-8617)


author: Marek Polacek <polacek@redhat.com> 4.8.5-38
changelog:
  - fix mode mismatch in prepare_cmp_insn (#1641329, PR target/63442)
  - allow libitm to use HTM (#1659698)
  - fix up memset handling in DSE (#1640805, PR rtl-optimization/69891)
  - fix bits/bytes confusion in set_noop_p (#1594975, PR rtl-optimization/68814)
  - enable initializing statics with COMPOUND_LITERAL_EXPR in C99
    (#1672652, PR c/63567)
  - fix PIC_OFFSET_TABLE_REGNUM (#1614326)
  - quash spurious -Wmissing-field-initializers warnings (#1633716, PR c/60784)
  - fix ICE with alias template (#1648161, PR c++/53658)


author: Marek Polacek <polacek@redhat.com> 4.8.5-43
changelog:
  - fix wrong code emitted for movv1qi on s390x (#1784759)
  - fix wrong code with EH due to a bug in LRA (#1800526)


author: Zdenek Pavlas <zpavlas@redhat.com> - 0.9.9-21
changelog:
  - update to latest HEAD
  - don't BuildRequire bash-completion in rhel
  - Fail for bad compress-type options to modifyrepo, like createrepo. BZ 886589
  - Fix options documentation. BZ 892657.
  - modifyrepo: fix --compress option bug. BZ 950724
  - modifyrepo: add --checksum and --{unique,simple}-md-filenames options


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-24
changelog:
  - mergerepo: merge package versions from multiple repos.
  - Related: bug#1178763
  - Close lock file before unlink().
  - Related: bug#1256216


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-26
changelog:
  - Make sure filename doesn't already contain a checksum.
  - Resolves: bug#1270784
  - Catch IOErrors when loading pkglist.
  - Resolves: bug#1083182
  - Add missing options to the manpage.
  - Resolves: bug#1285761


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-27
changelog:
  - Fix temporary files cleanup.
  - Resolves: bug#1406418
  - Fix --update for pkgs with same nevra.
  - Resolves: bug#1404239


author: Valentina Mukhamedzhanova <vmukhame@redhat.com> - 0.9.9-28
changelog:
  - createrepo: allow xz and bz2 for xml files.
  - Resolves: bug#1125437
  - modifyrepo: fix handling of already compressed input.
  - Resolves: bug#1227782
  - modifyrepo: handle empty file with LZMA.
  - Resolves: bug#1287685
  - modifyrepo: docs: remove compat compress type.
  - Resolves: bug#1287714


author: Petr Machata <pmachata@redhat.com> - 1:3.82-18
changelog:
  - Backport upstream patch that adds wildcard expansion to pattern
    rules. (make-3.82-stem_glob.patch)


author: Petr Machata <pmachata@redhat.com> - 1:3.82-19
changelog:
  - make now restores rlimit to its original values before launching
    subprocess via $(shell) (make-3.82-func_shell-rlimit.patch)
  - Determinize one test (make-3.82-tests-SECONDARY.patch)


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-22
changelog:
  - Check if the target-specific variable is the same as the global
    variable, and if it is, don't free it.  Savannah bug #31743.
    Resolves: #1323206


author: Patsy Franklin <pfrankli@redhat.com> - 1:3.82-23
changelog:
  - In very obscure situations we may incorrectly write the free token
    back to the pipe.
    Resolves: #1322670


author: DJ Delorie <dj@redhat.com> - 1:3.82-24
changelog:
  - Change fatal() to error() when a mix of explicit and implicit
    targets (in that order) is detected.
    Resolves: #1582545


author: Sergey Budnevitch <sb@nginx.com>
changelog:
  - 1.4.7
  - spec cleanup
  - openssl version dependence added
  - upgrade() function in the init script improved
  - warning added when binary upgrade returns non-zero exit code


author: Andrei Belov <defan@nginx.com>
changelog:
  - 2.0.0
  - refactored from previous Ruby-based version to Python
  - provides more metrics for N+ (server zones, caches)


author: Andrei Belov <defan@nginx.com>
changelog:
  - 2.0.0_9
  - fixed handling of caches configured without the "max_size" parameter
  - added support for HTTPS proxy


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-12
changelog:
  - fix CVE-2017-3737 - incorrect handling of fatal error state
  - fix CVE-2017-3738 - AVX2 Montgomery multiplication bug with 1024 bit modulus


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-13
changelog:
  - add S390x assembler updates
  - make CA name list comparison function case sensitive (#1548401)
  - fix CVE-2017-3735 - possible one byte overread with X.509 IPAdressFamily
  - fix CVE-2018-0732 - large prime DH DoS of TLS client
  - fix CVE-2018-0737 - RSA key generation cache timing vulnerability
  - fix CVE-2018-0739 - stack overflow parsing recursive ASN.1 structure


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-16
changelog:
  - fix CVE-2018-0495 - ROHNP - Key Extraction Side Channel on DSA, ECDSA
  - fix incorrect error message on FIPS DSA parameter generation (#1603597)


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-17
changelog:
  - use SHA-256 in FIPS RSA pairwise key check
  - fix CVE-2018-5407 (and CVE-2018-0735) - EC signature local
    timing side-channel key extraction


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2k-18
changelog:
  - fix CVE-2018-0734 - DSA signature local timing side channel
  - fix CVE-2019-1559 - 0-byte record padding oracle
  - close the RSA decryption One & done EM side channel (#1619558)


author: Petr Pisar <ppisar@redhat.com> - 8.32-13
changelog:
  - Disable unsupported JIT mode on little-endian 64-bit PowerPC platform
    (bug #1125642)
  - Raise optimization level to 3 on little-endian 64-bit PowerPC (bug #1123498)


author: Petr Pisar <ppisar@redhat.com> - 8.32-15
changelog:
  - Fix compiling expression where start-anchored character with more than one
    other case follows circumflex in multiline UTF mode (bug #1110621)
  - Fix character class with a literal quotation (bug #1111091)
  - Fix empty-matching possessive zero-repeat groups in interpreted mode
    (bug #1119320)
  - Fix compiler crash for zero-repeated groups with a recursive back reference
    (bug #1119356)
  - Reset non-matched groups within capturing group up to forced match
    (bug #1161597)
  - Fix static linking (bug #1217111)
  - Package pcredemo.c as a documentation for pcre-devel (bug #1217118)


author: Petr Pisar <ppisar@redhat.com> - 8.32-16
changelog:
  - Fix CVE-2015-2328 (infinite recursion compiling pattern with recursive
    reference in a group with indefinite repeat) (bug #1330509)
  - Fix CVE-2015-8385 (buffer overflow caused by named forward reference to
    duplicate group number) (bug #1330509)
  - Fix CVE-2015-8386 (buffer overflow caused by lookbehind assertion)
    (bug #1330509)
  - Fix CVE-2015-3217 (stack overflow caused by mishandled group empty match)
    (bug #1330509)
  - Fix CVE-2015-5073 and CVE-2015-8388 (buffer overflow for forward reference
    within backward assertion with excess closing parenthesis) (bug #1330509)
  - Fix CVE-2015-8391 (inefficient posix character class syntax check)
    (bug #1330509)
  - Fix CVE-2016-3191 (workspace overflow for (*ACCEPT) with deeply nested
    parentheses) (bug #1330509)


author: Petr Pisar <ppisar@redhat.com> - 8.32-17
changelog:
  - Let [:graph:], [:print:], and [:punct:] POSIX classes to handle Unicode
    characters in UCP mode to match Perl behavior (bug #1400267)
  - Fix matching Unicode ranges in JIT mode (bug #1402288)


author: Evan Hazlett <evan@docker.com> - 1.2.11-3.1
changelog:
  - Update the runc vendor to v1.0.0-rc9 which includes an additional
    mitigation for CVE-2019-16884
  - Add local-fs.target to service file to fix corrupt image after unexpected
    host reboot
  - Update Golang runtime to 1.12.13, which includes security fixes to the
    crypto/dsa package made in Go 1.12.11 (CVE-2019-17596), and fixes to the
    go command, runtime, syscall and net packages (Go 1.12.12)
  - CRI: Fix shim delete error code to avoid unnecessary retries in the CRI plugin


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.2.11-3.2
changelog:
  - Update Golang runtime to 1.12.15, which includes fixes in the net/http package
    and the runtime on ARM64


author: Derek McGowan <derek@docker.com> - 1.2.12-3.1
changelog:
  - Update the runc vendor to v1.0.0-rc10 which includes a mitigation for
    CVE-2019-19921.
  - Update the opencontainers/selinux which includes a mitigation for
    CVE-2019-16884.
  - Update Golang runtime to 1.12.16, mitigating the CVE-2020-0601
    certificate verification bypass on Windows, and CVE-2020-7919,
    which only affects 32-bit architectures.
  - A fix to prevent SIGSEGV when starting containerd-shim
  - Fix to prevent high system load/CPU utilization with liveness and readiness
    probes
  - Fix to prevent docker exec hanging if an earlier docker exec left a zombie
    process
  - CRI: Update the gopkg.in/yaml.v2 vendor to v2.2.8 with a mitigation for
    CVE-2019-11253


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.2.13-3.1
changelog:
  - Update to containerd 1.2.13, which fixes a regression introduced in v1.2.12
    that caused container/shim to hang on single core machines, and fixes an issue
    with blkio.
  - Update Golang runtime to 1.12.17.


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.2.13-3.2
changelog:
  - Build packages for RHEL-7 on s390x, CentOS 8, and Fedora 32
  - Add libseccomp as required dependency


author: Stephen Augustus <saugustus@vmware.com> - 1.15.1
changelog:
  - Source cri-tools from https://github.com/kubernetes-sigs/cri-tools
    instead of https://github.com/kubernetes-incubator/cri-tools


author: Stephen Augustus <saugustus@vmware.com> - 1.15.1
changelog:
  - Bump minimum versions of all kubernetes dependencies
  - Remove conditional logic for unsupported versions of Kubernetes


author: Stephen Augustus <saugustus@vmware.com> - 1.18.4
changelog:
  - Source CNI plugins from https://storage.googleapis.com/k8s-artifacts-cni/release
    instead of https://dl.k8s.io/network-plugins


author: Stephen Augustus <saugustus@vmware.com> - 1.18.4
changelog:
  - Source cri-tools from https://storage.googleapis.com/k8s-artifacts-cri-tools/release
    instead of https://github.com/kubernetes-sigs/cri-tools


author: Damien Miller <djm@mindrot.org>
changelog:
  - Merge in spec changes from seba@iq.pl (Sebastian Pachuta)
  - Add new {ssh,sshd}_config.5 manpages
  - Add new ssh-keysign program and remove setuid from ssh client


author: Damien Miller <djm@mindrot.org>
changelog:
  - Don't install profile.d scripts when not building with GNOME/GTK askpass
    (patch from bet@rahul.net)


author: Damien Miller <djm@mindrot.org>
changelog:
  - Remove noip6 option. This may be controlled at run-time in client config
    file using new AddressFamily directive


author: Nico Kadel-Garcia <nakdel@gmail.com>
changelog:
  - Add '--mandir' and '--with-mantype' for RHEL 5 compatibility
  - Add 'dist' option to 'ver' so package names reflect OS at build time
  - Always include x11-ssh-askpass tarball in SRPM
  - Add openssh-x11-aspass BuildRequires for libXT-devel, imake, gtk2-devel
  - Discard 'K5DIR' reporting, not usable inside 'mock' for RHEL 5 compatibility
  - Discard obsolete '--with-rsh' configure option
  - Update openssl-devel dependency to 0.9.8f, as found in autoconf


author: Darren Tucker <dtucker@dtucker.net>
changelog:
  - Update openssl-devel dependency to match current requirements.
  - Handle Fedora >=6 openssl 1.0 compat libs.
  - Remove SSH1 from description.
  - Don't strip binaries at build time so that debuginfo package can be
    created.


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 3.5.1-1
changelog:
  - New upstream release
  - Updated nopprof patch to match new release
  - Fixed a few bogus changelog entries


author: Nathan Scott <nathans@redhat.com> - 3.2.9-1
changelog:
  - Upstream 3.2.9
  - Add RuntimeDirectory=redis to systemd unit file (RHBZ #1454700)
  - Mark rundir as %ghost since it may disappear (tmpfs - #1454700)
  - Fix a shutdown failure with Unix domain sockets (RHBZ #1444988)


author: Nathan Scott <nathans@redhat.com> - 3.2.10-1
changelog:
  - Upstream 3.2.10 release
  - Ensure both the redis and redis-sentinel service files set correct perms
  - Dropped systemd tmpfiles source, handled directly in systemd service files


author: Nathan Scott <nathans@redhat.com> - 3.2.11-1
changelog:
  - Upstream 3.2.11 bug-fix-only release
  - Switch to using Type=notify for Redis systemd services (RHBZ #1172841)
  - Add Provides:bundled hiredis, linenoise, lua-libs clauses (RHBZ #788500)


author: Nathan Scott <nathans@redhat.com> - 3.2.12-1
changelog:
  - Upstream 3.2.12 security fix release.
  - Fixes CVE-2017-15047: Lack clusterLoadConfig input validation (RHBZ #1499153)
  - Fixes CVE-2018-11218: Heap corruption in lua_cmsgpack.c (RHBZ #1591537)
  - Fixes CVE-2018-11219: Integer overflow in lua_struct.c b_unpack (RHBZ #1591538)
  - Fixes CVE-2018-12326: code execution via a crafted command line (RHBZ #1594294)


